F_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x100000000000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5200, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800a00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 834.709244] FAT-fs (loop5): bogus number of reserved sectors [ 834.715819] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xae, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000180)={0x9, 0x6, {0x56, 0x800, 0x4, {0x0, 0x8000}, {0x7, 0x2}, @rumble={0x4}}, {0x57, 0x3, 0x7, {0x8001, 0x2}, {0x1, 0xffff}, @const={0x6, {0x7fffffff, 0x7, 0x1f, 0x1}}}}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x7}, 0xb) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r2, 0x0, 0x4) statx(r1, &(0x7f0000000240)='./file0\x00', 0x6000, 0xfff, &(0x7f0000000340)) [ 834.768485] EXT4-fs (loop2): inodes count not valid: 2688 vs 128 [ 834.811730] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 834.846808] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fc07040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 834.868428] EXT4-fs (loop0): group descriptors corrupted! [ 834.893261] FAT-fs (loop5): bogus number of reserved sectors 06:53:28 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 834.945888] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5300, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 835.039084] FAT-fs (loop5): bogus number of reserved sectors [ 835.061791] FAT-fs (loop5): Can't find a valid FAT filesystem [ 835.065335] EXT4-fs (loop2): inodes count not valid: 67632256 vs 128 06:53:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) socketpair(0x0, 0x80000, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x2, 0x100000001, 0x168, 'queue0\x00', 0xffffffffffffffff}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x21000000, 0x0) fchdir(r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000400)={{0x9, 0x2}, 'port1\x00', 0x0, 0x800, 0x4, 0x2, 0x94e8, 0x1, 0x3, 0x0, 0x2}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x141041, 0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="b2c3da350dce8b5b97d13fc3752612aa9bff29cbc881d90784d791a03abe6b5dfd3fef9992d891bf0d73d13900000000d91763b3ccba84c0801ab623833196f3c8997120d3687b0fee0c95978e4c9acc90f06a9e6e35fcb04d702044995393a5a5dfeaa39db48c647b5100000000000000f4641796c49185f5033ad3518361"], 0x1) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x91, 0x80000) lseek(r2, 0x0, 0x4) [ 835.251966] FAT-fs (loop5): bogus number of reserved sectors [ 835.272857] FAT-fs (loop5): Can't find a valid FAT filesystem [ 835.311095] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 835.335958] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 835.346533] EXT4-fs (loop0): group descriptors corrupted! [ 835.364305] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 835.438632] audit: type=1804 audit(1540968808.628:104): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir504327566/syzkaller.Ku0hwC/810/file0/file0" dev="ramfs" ino=117390 res=1 06:53:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 06:53:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000006002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x21}], 0x1, &(0x7f0000001580)}], 0x1, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000080)={0x4, 0x6, 0x81, [], &(0x7f0000000040)=0x8}) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r3, 0x0, 0x4) 06:53:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x42b, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 835.561931] audit: type=1804 audit(1540968808.628:105): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir504327566/syzkaller.Ku0hwC/810/file0/file0" dev="ramfs" ino=117390 res=1 [ 835.623891] FAT-fs (loop5): bogus number of reserved sectors [ 835.629873] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 835.648635] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 835.658206] EXT4-fs (loop2): group descriptors corrupted! [ 835.664754] FAT-fs (loop5): Can't find a valid FAT filesystem [ 835.688525] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 835.711281] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 835.722053] EXT4-fs (loop0): group descriptors corrupted! 06:53:29 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x8cffffff00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 835.766409] FAT-fs (loop5): bogus number of reserved sectors [ 835.785810] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000080002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) personality(0x0) 06:53:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) recvfrom(r0, &(0x7f0000000100)=""/130, 0x82, 0x100, &(0x7f0000000040)=@in6={0xa, 0x4e22, 0x400, @loopback, 0xff}, 0x80) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x101000, 0x0) 06:53:29 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6800, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 836.053072] EXT4-fs (loop2): inodes count not valid: 134217856 vs 128 06:53:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "4cc93b", 0x10, 0x3a, 0x0, @empty, @ipv4={[], [], @rand_addr}, {[], @icmpv6=@ni}}}}}, 0x0) [ 836.141140] EXT4-fs (loop2): inodes count not valid: 134217856 vs 128 [ 836.149809] FAT-fs (loop5): bogus number of reserved sectors [ 836.179039] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @remote}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x100000001, {{0x2, 0x0, @multicast2}}}, 0x88) 06:53:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800074000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 836.264989] FAT-fs (loop5): Unrecognized mount option "/dev/kvm" or missing value [ 836.276765] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 836.302212] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 836.311853] EXT4-fs (loop0): group descriptors corrupted! 06:53:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000000)) 06:53:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0077ae9dcf137fdb11c2a8e981ad8edf1dd9a570d9190a103da07399ee471403f64e01e10845734002e9c70de841a1918baaa3aad6a189de7526f5f10e58b1bbf9f671c37e7430cf1ad6b60f6167f5fffad9759ad84f7a02254efaf088bc7f0458f43c87aa7b73156f6159c8f806acc41938bb248cf5f539c823f1cc3113087d533c66bc05351514abe3922e5768ee1d608a4d89d9a886b688191b5317fcd6905de304712d78b9c66a27c91cedcd00703494226b35a267a106d2972de761ed795549"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000080)='./bus\x00', r1}, 0x10) [ 836.454459] binder: 8925:8928 ioctl c018620c 20000000 returned -1 [ 836.466241] binder: 8925:8931 ioctl c018620c 20000000 returned -1 [ 836.478493] EXT4-fs (loop2): inodes count not valid: 7602304 vs 128 [ 836.596850] FAT-fs (loop5): bogus number of reserved sectors [ 836.603355] FAT-fs (loop5): Can't find a valid FAT filesystem [ 836.669418] FAT-fs (loop5): bogus number of reserved sectors [ 836.676481] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:30 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xffc99a3b00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3300, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x20001) 06:53:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000a000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) accept4$bt_l2cap(r0, &(0x7f0000000340), &(0x7f00000001c0)=0xfffffffffffffeff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) [ 836.939789] EXT4-fs (loop2): inodes count not valid: 655488 vs 128 [ 836.962890] FAT-fs (loop5): bogus number of reserved sectors [ 837.004648] FAT-fs (loop5): Can't find a valid FAT filesystem [ 837.023760] EXT4-fs (loop2): inodes count not valid: 655488 vs 128 [ 837.085399] FAT-fs (loop5): bogus number of reserved sectors [ 837.091575] FAT-fs (loop5): Can't find a valid FAT filesystem [ 837.116019] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:30 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="230000001a003ffe2a46f799e7ce00fe029ac20000000000fc05007b74c71bf53e8025", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/231, 0xe7}, 0x0) 06:53:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="804800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 837.137514] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 837.149139] EXT4-fs (loop0): group descriptors corrupted! 06:53:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 06:53:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2f, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e22, 0x3, 'lblc\x00', 0x12, 0x99d4, 0x69}, 0x2c) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x7) [ 837.269770] EXT4-fs (loop2): inodes count not valid: 18560 vs 128 06:53:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6a00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 837.381818] FAT-fs (loop5): bogus number of reserved sectors [ 837.388342] FAT-fs (loop5): Can't find a valid FAT filesystem [ 837.397542] EXT4-fs (loop2): inodes count not valid: 18560 vs 128 06:53:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f5ffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 837.438019] FAT-fs (loop5): bogus number of reserved sectors [ 837.464235] FAT-fs (loop5): Can't find a valid FAT filesystem [ 837.570038] EXT4-fs (loop2): inodes count not valid: 4294964608 vs 128 [ 837.596479] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 837.619244] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 837.643577] EXT4-fs (loop2): inodes count not valid: 4294964608 vs 128 [ 837.675651] EXT4-fs (loop0): group descriptors corrupted! [ 837.778028] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 837.787567] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 837.797763] EXT4-fs (loop0): group descriptors corrupted! 06:53:31 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xfffffff6}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x10001, 0x0, &(0x7f0000000140), 0x1000020, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0xfffffffffffffffe, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x12000, 0x0) 06:53:31 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") umount2(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x1) 06:53:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800002040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5e00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 838.003261] EXT4-fs (loop2): inodes count not valid: 67240064 vs 128 [ 838.076443] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 838.124022] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 838.147668] EXT4-fs (loop0): group descriptors corrupted! 06:53:33 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800006000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="0d8d53", 0x3}, {&(0x7f0000000140)="5ed3f51b6c4115e0740e11b41e767b3d1e25dbb2944588d6", 0x18}, {&(0x7f0000000180)="a2b8ee763dea95fa87197b85d66c6c9f59d0659067e7c449254bc934bb16e4b3fb1d961a9939e797bb72ccc43d9286737bf206592118853a13207b67ac4cff70", 0x40}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000340)="c40bbe32d1c38ad303396dc760463110a598d31907aa1c11782c3e3323ba172f7b8495533460612ce6160b13dc3abcd4565a00430dbf07dba616425685f5bc2a8415003f42c37cb97118f0adfb3f6df9e2ff0bf0ddf059e57fe99ef3ca849399bdb3afcea8d46adcf063e72917031f1b3c1beb14a683e3db93f82700cd95b84a5899c457de0fe469d285dfdb748b47e65c889fa1357ef037cd87f8a9b1aeda82cd4e3935a41fd4589db6c629e9fb09bd9e7e5d1c9d0c3a5f13dc113a93b24da24047c70df21652ab586a55bfc7fe2c123e5beca4e1b2d86140", 0xd9}, {&(0x7f0000000440)="091a316e4864486bbe8091453ff2d0a4b1859f20962e18c4d704a29ed45c7d812a5106ea888777f98a31a43dc7fbb8769a4447936ffa8d4df7738caf87d7b7547505c175ce735fec3f065eaf025a872888fb2c05a33cf128ee139d90f343c86db8f23c217197f650828faa1eda554de0", 0x70}, {&(0x7f0000001a80)="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", 0x1000}], 0x7, &(0x7f00000001c0)=[{0x30, 0x10c, 0x1d99, "8574673aed35fa76907a00fadcb487875f0ebce07dfe889a93cb"}], 0x30, 0x4000}, 0x4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") umount2(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x1) 06:53:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3b1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:33 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x3fffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 840.421124] FAT-fs (loop5): bogus number of reserved sectors [ 840.427189] FAT-fs (loop5): Can't find a valid FAT filesystem [ 840.447278] EXT4-fs (loop2): inodes count not valid: 393344 vs 128 [ 840.457101] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 840.504800] FAT-fs (loop5): Unrecognized mount option "Ä ¾2ÑÊÓ9mÇ`F1¥˜Óªx" or missing value [ 840.523122] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 840.534998] EXT4-fs (loop2): inodes count not valid: 393344 vs 128 06:53:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") umount2(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x1) 06:53:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="804c00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 840.571353] EXT4-fs (loop0): group descriptors corrupted! 06:53:33 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x2f) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000240)) 06:53:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) socket$bt_bnep(0x1f, 0x3, 0x4) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x80000009}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0xfffffe61) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') write$binfmt_script(r1, &(0x7f0000000600)={'#! ', './file0', [{}, {0x20, '^'}], 0xa, "34f56b8beab47a9537030cdb7fb7a06685516ddcc430b540e1bc83deb15d37ef8c96539e40eeaed79b73b1678a7e3205d4bb99ba6a51717a83937194cb9a006330ad835868ebd542a27c4070a5de23e067f1e904bc932be2a8dc870097177b4df6ea7b8ced"}, 0x73) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2811000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x10c, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeb}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5d7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @remote}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x24}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) mknodat(r0, &(0x7f0000000680)='./file1\x00', 0x800, 0x7) lsetxattr$security_smack_entry(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='security.SMACK64IPIN\x00', &(0x7f00000005c0)='security.ima\x00', 0xd, 0x2) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4844) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r0, 0x0, 0x1, &(0x7f00000006c0)='\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000780)={{0x3, 0x7, 0x800, 0x20, '\x00', 0x80000000}, 0x0, 0x40, 0x15, r3, 0x7, 0x1ff, 'syz0\x00', &(0x7f00000008c0)=['\x00', 'ramfs\x00', ')\x00', '{*wlan0\x00', 'wlan0ppp1[$\x00', '*&\x00', '^'], 0x21, [], [0xbb5, 0x4, 0x9]}) 06:53:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000002002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:33 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@remote, @local}, 0x8) [ 840.790640] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 840.816502] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 840.843536] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 840.881459] EXT4-fs (loop0): group descriptors corrupted! [ 840.882920] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 840.929796] FAT-fs (loop5): bogus number of reserved sectors [ 840.948769] FAT-fs (loop5): Can't find a valid FAT filesystem [ 840.967313] EXT4-fs (loop2): group descriptors corrupted! [ 841.042279] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 841.082364] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 841.122715] EXT4-fs (loop2): group descriptors corrupted! 06:53:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14}, 0x14}}, 0x4008000) sendmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x20000b40, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4) 06:53:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5700, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:34 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:34 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x200000000000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 841.467219] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 841.482222] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 841.506617] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 841.541086] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 841.564348] EXT4-fs (loop2): group descriptors corrupted! [ 841.593670] EXT4-fs (loop0): group descriptors corrupted! [ 841.679819] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 841.702728] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 841.716410] FAT-fs (loop5): Unrecognized mount option "" or missing value 06:53:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6b00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 841.728943] EXT4-fs (loop2): group descriptors corrupted! 06:53:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800003000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00d76a1ce4b51e456cc9c974c8926c07e495bda2f2b9b0cdbcfdbfe15efeb3811999706b087a126c7dfc0f74fb966ea2f4ca18da8692a64874b5a15a13bb747b125deaa75206ce16b042c10a93dcab95be7ab7dbcdae70d8"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) [ 841.859079] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 841.869336] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 841.881467] EXT4-fs (loop0): group descriptors corrupted! 06:53:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x7300, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 842.010874] EXT4-fs (loop2): inodes count not valid: 196736 vs 128 06:53:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800179000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 842.162888] FAT-fs (loop5): bogus number of reserved sectors [ 842.172713] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 842.199323] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:35 executing program 4: syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x2, 0x448a02) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0xf0ffffff}, 0xc, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 842.218017] EXT4-fs (loop2): inodes count not valid: 7930240 vs 128 [ 842.230756] FAT-fs (loop5): Can't find a valid FAT filesystem [ 842.238781] EXT4-fs (loop0): group descriptors corrupted! [ 842.299357] FAT-fs (loop5): bogus number of reserved sectors [ 842.306573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 842.329290] EXT4-fs (loop2): inodes count not valid: 7930240 vs 128 06:53:35 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:35 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xf6ffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3a00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807a00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$packet_buf(r0, 0x107, 0x3, &(0x7f0000000080)=""/16, &(0x7f0000000100)=0x10) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r1, &(0x7f0000000180), 0x10) shutdown(r1, 0x1) [ 843.111635] EXT4-fs (loop2): inodes count not valid: 31360 vs 128 [ 843.118313] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 843.151841] FAT-fs (loop5): bogus number of reserved sectors [ 843.162694] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80d803000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080), 0xffffffffffffffaa) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18}, 0xfffffffffffffe73) [ 843.192959] FAT-fs (loop5): Can't find a valid FAT filesystem [ 843.213211] EXT4-fs (loop0): group descriptors corrupted! 06:53:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080), 0xffffffffffffffaa) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18}, 0xfffffffffffffe73) 06:53:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x20400, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 843.307019] FAT-fs (loop5): Unrecognized mount option "¥i.oúÎB=³WEöcÕì "±xs%1!dJGÉ]ª€mŠ2‹É-Z»gÏVý流»»jv¨bä» Ür½å+l^ˆ²äE¤wt]Q.IT!ú£ 5 ß©.^VÜosŸøA›IàÚw÷dl¿«ò6"HÆQ@£è½I”€Ÿzûùh&.øDqQ¸È.fèàw^‰oR-§«¤c%²|¦I¾´Ù*÷åñö3ªOoRxfW?ÛdÅì%/~£«µ¬ï×ä¿‹!˜Xú?MÛöñÛÛ<" or missing value 06:53:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x42000, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) [ 843.394252] EXT4-fs (loop2): inodes count not valid: 252032 vs 128 06:53:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80022e000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 843.554843] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 843.582740] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 843.595054] FAT-fs (loop5): bogus number of reserved sectors [ 843.604216] EXT4-fs (loop0): group descriptors corrupted! [ 843.611318] EXT4-fs (loop2): inodes count not valid: 3015296 vs 128 [ 843.624892] FAT-fs (loop5): Can't find a valid FAT filesystem [ 843.692004] EXT4-fs (loop2): inodes count not valid: 3015296 vs 128 06:53:37 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:37 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xffffff3f}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x65, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800400000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fchdir(r0) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x22000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x2f, &(0x7f0000000180)=""/67, &(0x7f0000000280)=0x43) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0xffffffffffffffff, 0x2cb8000000000000}) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x412100, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="8061c942aa8427f27c97af7f0e4616da1ba391216bbd91679866c3d00d6f2958293201942a19d259b2"], 0x1) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x8, 0x8000}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r3, 0x0, 0x4) [ 844.059819] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 844.087526] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 844.106506] EXT4-fs (loop2): inodes count not valid: 1152 vs 128 [ 844.114012] FAT-fs (loop5): bogus number of reserved sectors [ 844.133797] EXT4-fs (loop0): group descriptors corrupted! [ 844.158012] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="805b02000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5c00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:37 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xfffffffe}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 844.301740] FAT-fs (loop5): Unrecognized mount option "€aÉBª„'ò|—¯FÚ£‘!k½‘g˜fÃÐ o)X)2”*ÒY²" or missing value [ 844.336670] EXT4-fs (loop2): inodes count not valid: 154496 vs 128 [ 844.405665] EXT4-fs (loop2): inodes count not valid: 154496 vs 128 06:53:37 executing program 4: 06:53:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)) lseek(r1, 0x0, 0x4) [ 844.470835] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 844.487464] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 844.497351] EXT4-fs (loop0): group descriptors corrupted! 06:53:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0xa000, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 844.611562] EXT4-fs (loop2): inodes count not valid: 67108992 vs 128 [ 844.671951] FAT-fs (loop5): bogus number of reserved sectors [ 844.682787] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:38 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:38 executing program 4: 06:53:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000003f02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 844.783618] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 844.821527] FAT-fs (loop5): bogus number of reserved sectors 06:53:38 executing program 4: [ 844.843291] FAT-fs (loop5): Can't find a valid FAT filesystem [ 844.880232] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 844.921823] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 844.960853] EXT4-fs (loop0): group descriptors corrupted! 06:53:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file1\x00', 0x2000000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x3c, @broadcast, 0x4e22, 0x2, 'dh\x00', 0x21, 0x5, 0x7b}, 0x2c) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x8001, 0x0, 0x4}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1000000b1, {0x2, 0x4, 0x2, 0x5, 0x10001, 0x8d}, 0x3ff, 0x1}, 0xe) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:38 executing program 4: [ 844.987137] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 845.013474] EXT4-fs (loop2): group descriptors corrupted! 06:53:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3800, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 845.095174] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 845.131869] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 845.178670] FAT-fs (loop5): bogus number of reserved sectors [ 845.227453] EXT4-fs (loop2): group descriptors corrupted! [ 845.248026] FAT-fs (loop5): Can't find a valid FAT filesystem [ 845.306140] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 845.329229] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 845.340406] EXT4-fs (loop0): group descriptors corrupted! 06:53:38 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xfeffff3f00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:38 executing program 4: 06:53:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800001020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:38 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x200000002000, &(0x7f0000000100)=0x4) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r2, 0x0, 0x4) 06:53:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x42c, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 845.476633] EXT4-fs (loop2): inodes count not valid: 33620096 vs 128 [ 845.573616] EXT4-fs (loop2): inodes count not valid: 33620096 vs 128 [ 845.580388] FAT-fs (loop5): bogus number of reserved sectors [ 845.596497] FAT-fs (loop5): Can't find a valid FAT filesystem [ 845.681695] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 845.695917] FAT-fs (loop5): bogus number of reserved sectors [ 845.701981] FAT-fs (loop5): Can't find a valid FAT filesystem [ 845.717977] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 845.728003] EXT4-fs (loop0): group descriptors corrupted! 06:53:39 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:39 executing program 4: 06:53:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f180000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x1) lseek(r1, 0x0, 0x4) [ 845.826989] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 845.836654] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 845.846539] EXT4-fs (loop0): group descriptors corrupted! 06:53:39 executing program 4: 06:53:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 845.929296] EXT4-fs (loop2): inodes count not valid: 8450432 vs 128 [ 846.027085] FAT-fs (loop5): bogus number of reserved sectors [ 846.065732] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800600000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 846.098690] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 846.135655] FAT-fs (loop5): bogus number of reserved sectors [ 846.151935] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 846.174178] EXT4-fs (loop0): group descriptors corrupted! [ 846.185510] FAT-fs (loop5): Can't find a valid FAT filesystem [ 846.218799] EXT4-fs (loop2): inodes count not valid: 1664 vs 128 06:53:39 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0xffffff3f00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:39 executing program 4: 06:53:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6100, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000402000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000001c0)={0xbe, 0xf000}) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_default\x00', &(0x7f0000000380)='\x00', 0xffffffffffffffeb, 0x1) [ 846.513300] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 846.555337] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 846.562333] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 846.583040] EXT4-fs (loop2): group descriptors corrupted! [ 846.599333] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 846.605823] FAT-fs (loop5): bogus number of reserved sectors [ 846.628680] FAT-fs (loop5): Can't find a valid FAT filesystem [ 846.630798] EXT4-fs (loop0): group descriptors corrupted! [ 846.647196] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 846.664313] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 846.675346] EXT4-fs (loop2): group descriptors corrupted! [ 846.708534] FAT-fs (loop5): bogus number of reserved sectors [ 846.767944] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:40 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:40 executing program 4: 06:53:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80004c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6600, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:40 executing program 4: 06:53:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', 0xfffffffffffffffd, &(0x7f0000000080)='system_u:object_r:modules_object_t:s0\x00', 0x26, 0x2) r0 = open(&(0x7f0000000100)='./file0\x00', 0x5011fe, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) [ 846.938313] EXT4-fs (loop2): inodes count not valid: 4980864 vs 128 06:53:40 executing program 4: [ 846.985054] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 847.028804] EXT4-fs (loop2): inodes count not valid: 4980864 vs 128 [ 847.037699] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 847.056144] FAT-fs (loop5): bogus number of reserved sectors [ 847.063149] EXT4-fs (loop0): group descriptors corrupted! [ 847.104845] FAT-fs (loop5): Can't find a valid FAT filesystem [ 847.188508] FAT-fs (loop5): bogus number of reserved sectors [ 847.214270] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:40 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x1000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="808cffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:40 executing program 4: 06:53:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x42a, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) [ 847.473090] FAT-fs (loop5): bogus number of reserved sectors [ 847.493017] FAT-fs (loop5): Can't find a valid FAT filesystem [ 847.539662] EXT4-fs (loop2): inodes count not valid: 4294937728 vs 128 [ 847.569118] FAT-fs (loop5): bogus number of reserved sectors [ 847.580385] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 847.591827] FAT-fs (loop5): Can't find a valid FAT filesystem [ 847.619256] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 847.632471] EXT4-fs (loop2): inodes count not valid: 4294937728 vs 128 [ 847.649100] EXT4-fs (loop0): group descriptors corrupted! [ 847.726766] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 847.736588] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 847.747227] EXT4-fs (loop0): group descriptors corrupted! 06:53:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x101000) write$P9_RSTATFS(r0, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x4, 0x6, 0x5, 0x100, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0xe63}}, 0x43) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0xfffffffffffffdf0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r2, 0x0, 0x4) 06:53:41 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:41 executing program 4: 06:53:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800002010002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:41 executing program 4: [ 847.915779] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 847.938134] FAT-fs (loop5): bogus number of reserved sectors [ 847.952813] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 847.974426] EXT4-fs (loop2): inodes count not valid: 16908416 vs 128 [ 847.998188] FAT-fs (loop5): Can't find a valid FAT filesystem [ 848.005505] EXT4-fs (loop0): group descriptors corrupted! 06:53:41 executing program 4: [ 848.139465] FAT-fs (loop5): bogus number of reserved sectors [ 848.147046] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:41 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x2000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800068000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x20000000, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:41 executing program 4: 06:53:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/55) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1000"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) 06:53:41 executing program 4: [ 848.464229] EXT4-fs (loop2): inodes count not valid: 6815872 vs 128 [ 848.499011] FAT-fs (loop5): bogus number of reserved sectors [ 848.505732] FAT-fs (loop5): Can't find a valid FAT filesystem [ 848.556551] EXT4-fs (loop2): inodes count not valid: 6815872 vs 128 [ 848.645345] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 848.656114] FAT-fs (loop5): bogus number of reserved sectors [ 848.672342] FAT-fs (loop5): Can't find a valid FAT filesystem [ 848.690958] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 848.701827] EXT4-fs (loop0): group descriptors corrupted! 06:53:42 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:42 executing program 4: 06:53:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80002d000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x2) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:42 executing program 4: 06:53:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4a00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 849.004313] FAT-fs (loop5): bogus number of reserved sectors [ 849.010445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 849.020263] EXT4-fs (loop2): inodes count not valid: 2949248 vs 128 [ 849.087888] FAT-fs (loop5): bogus number of reserved sectors [ 849.105391] FAT-fs (loop5): Can't find a valid FAT filesystem [ 849.164654] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 849.173996] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 849.191647] EXT4-fs (loop0): group descriptors corrupted! 06:53:42 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xf6ffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:42 executing program 4: 06:53:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000302000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) pread64(r0, &(0x7f0000000100)=""/158, 0x9e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$sock_bt(r1, 0xdd1f, &(0x7f0000000340)="e592ee881f8689665577fa96dac1734527075a9e1f64389b4bd177fe9978a9ab9032921129664ae20ebf7d778d526f29fff372165774da8311b77c1af802a8b157ed46c632e6182ceb181c3b2a3767f4ee99e4b8cf26f8bfcc468b4cb1e1515a35af0828dc74e7e673a58777ba87b75c90250bf8cc08c34e86f58e7eaec605223fd627ae") setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v1={0x2, 'V'}, 0x4a, 0x0) lseek(r1, 0x0, 0x4) 06:53:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x428, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:42 executing program 4: [ 849.527738] FAT-fs (loop5): bogus number of reserved sectors [ 849.540953] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 849.551885] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 849.588268] FAT-fs (loop5): Can't find a valid FAT filesystem [ 849.610244] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 849.640056] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 849.661185] EXT4-fs (loop2): group descriptors corrupted! [ 849.669387] EXT4-fs (loop0): group descriptors corrupted! [ 849.709030] FAT-fs (loop5): Unrecognized mount option "å’‰fUwú–ÚÁsE'Zžd8›KÑwþ™x©«2’)fJâ¿}wRo)ÿórWtÚƒ·|ø¨±WíFÆ2æ" or missing value [ 849.881430] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 849.891393] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 849.925964] EXT4-fs (loop0): group descriptors corrupted! 06:53:45 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800023000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:45 executing program 4: 06:53:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x400000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/199) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x66, &(0x7f0000000040)=""/102}) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000180)) lseek(r2, 0x0, 0x4) 06:53:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x10200, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:45 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xebffffff00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 852.107566] FAT-fs (loop5): bogus number of reserved sectors [ 852.124303] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:45 executing program 4: [ 852.166809] EXT4-fs (loop2): inodes count not valid: 2293888 vs 128 [ 852.195194] FAT-fs (loop5): bogus number of reserved sectors 06:53:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8003d8000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 852.226964] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:45 executing program 4: 06:53:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="8c"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) [ 852.341535] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 852.421508] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 852.459427] EXT4-fs (loop2): inodes count not valid: 14156672 vs 128 06:53:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="66b9030100c066b80000000066ba010000000f306767660f69ac13d0350000ea9d1e9a00260f89f12a814f35ccd9ba6100ed0f20c06635010000000f22c02e360f7f31f2a5650faeed", 0x49}], 0x1, 0x0, &(0x7f0000000400), 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000006c0), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)="d7dc59a26c925bee7f043a45858b6cce5b0883b0f328f3d0a5fdf3e728e7ab29e46104ad0cd3165aca156b7c7c0655b0c687c7bb5161369d35bc229673fb40d918adaef28d506ee996bca7e6eab4cb8c017114859bd347a371de2210349bac7d82527702bc95443594eda26ad223230000101ec5d6eb33be05b103675888a96b01c8f2d375ee1551b28a28f5bf77aba9257a6f8115d15fffc005b8bd91b2000000000000000000") setpriority(0x0, 0x0, 0x0) 06:53:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="802300000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 852.473065] EXT4-fs (loop0): group descriptors corrupted! [ 852.554464] FAT-fs (loop5): bogus number of reserved sectors [ 852.577676] EXT4-fs (loop2): inodes count not valid: 9088 vs 128 [ 852.602729] FAT-fs (loop5): Can't find a valid FAT filesystem [ 852.648180] EXT4-fs (loop2): inodes count not valid: 9088 vs 128 [ 852.689214] FAT-fs (loop5): bogus number of reserved sectors [ 852.701027] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:46 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x2f00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="66b9030100c066b80000000066ba010000000f306767660f69ac13d0350000ea9d1e9a00260f89f12a814f35ccd9ba6100ed0f20c06635010000000f22c02e360f7f31f2a5650faeed", 0x49}], 0x1, 0x0, &(0x7f0000000400), 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000006c0), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)="d7dc59a26c925bee7f043a45858b6cce5b0883b0f328f3d0a5fdf3e728e7ab29e46104ad0cd3165aca156b7c7c0655b0c687c7bb5161369d35bc229673fb40d918adaef28d506ee996bca7e6eab4cb8c017114859bd347a371de2210349bac7d82527702bc95443594eda26ad223230000101ec5d6eb33be05b103675888a96b01c8f2d375ee1551b28a28f5bf77aba9257a6f8115d15fffc005b8bd91b2000000000000000000") setpriority(0x0, 0x0, 0x0) 06:53:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8080f1000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup(r0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 06:53:46 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffffff3f00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 853.147040] EXT4-fs (loop2): inodes count not valid: 15827072 vs 128 [ 853.170390] FAT-fs (loop5): bogus number of reserved sectors 06:53:46 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 853.206667] FAT-fs (loop5): Can't find a valid FAT filesystem [ 853.228439] EXT4-fs (loop2): inodes count not valid: 15827072 vs 128 [ 853.268348] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 853.292955] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000fc02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 853.316002] FAT-fs (loop5): bogus number of reserved sectors [ 853.334427] FAT-fs (loop5): Can't find a valid FAT filesystem [ 853.351859] EXT4-fs (loop0): group descriptors corrupted! 06:53:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYBLOB="c9175bc840bc87f794d40a03bf0eb4d0d8275b8c6ec3feac577026acbb44d752cea9f3339fecef4c3c26be55c9b34bb2bae2d47cdefe1e1836aa4056aad20731fd2bd21947a6fafedf0dc2692839c698c167e3b9d7517140483855", @ANYRESHEX, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="ff", @ANYRES16, @ANYBLOB="3c79523570f56d984209e0e3f6610c4afeceda1657ecbea57969fa1ed911950c859f66970cf7defa38dab2bc412de813cbc95258d064738a3d9ad4313bd3470820c159ceab78ae08d31c7a83ea6832020b8d43348270dd6a5636f70f39a7ead6e0d26367214d18c9a165ed7749daab0415418b7341e2782ba3d95cfb52606c8e842f55a033419d7d4446e582e026d35c3f", @ANYPTR, @ANYRES64]], @ANYRES16, @ANYRES64, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16], @ANYRES64, @ANYRESHEX=0x0, @ANYPTR64, @ANYRESOCT, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="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"], @ANYRESDEC]) getrusage(0x1, &(0x7f00000005c0)) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) listen(r0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:46 executing program 4: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0x0, 0xffffffffffefffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x3ac, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001540)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x15d4}, &(0x7f00000015c0)=0x18) 06:53:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x7100, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 853.485455] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 853.524938] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 853.595144] EXT4-fs (loop2): group descriptors corrupted! [ 853.629854] FAT-fs (loop5): bogus number of reserved sectors [ 853.648697] FAT-fs (loop5): Can't find a valid FAT filesystem [ 853.695362] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 853.713094] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 853.742430] FAT-fs (loop5): bogus number of reserved sectors [ 853.752119] EXT4-fs (loop2): group descriptors corrupted! [ 853.781740] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000002d02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 853.791667] FAT-fs (loop5): Can't find a valid FAT filesystem [ 853.806237] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 853.831806] EXT4-fs (loop0): group descriptors corrupted! [ 854.044126] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 854.069025] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 854.084033] EXT4-fs (loop2): group descriptors corrupted! 06:53:47 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 06:53:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4400, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:47 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffc99a3b}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800008040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 854.217877] FAT-fs (loop5): bogus number of reserved sectors [ 854.262476] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 854.282895] FAT-fs (loop5): Can't find a valid FAT filesystem [ 854.310784] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 854.333095] EXT4-fs (loop0): group descriptors corrupted! [ 854.346838] EXT4-fs (loop2): inodes count not valid: 67633280 vs 128 [ 854.355253] FAT-fs (loop5): bogus number of reserved sectors [ 854.361195] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000fff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000100)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3d, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:47 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setlease(r0, 0x40b, 0x0) [ 854.562820] EXT4-fs (loop2): inodes count not valid: 251658368 vs 128 06:53:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000c0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 854.604161] FAT-fs (loop5): bogus number of reserved sectors [ 854.639844] FAT-fs (loop5): Can't find a valid FAT filesystem [ 854.678053] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:47 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x53, 0x0, 0x0, 0x164, @scatter={0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000580)=""/218, 0xda}]}, &(0x7f0000000680), &(0x7f00000006c0)=""/114, 0x0, 0x2, 0x0, &(0x7f0000000740)}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000800)=""/112) r4 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) clock_adjtime(0x6, &(0x7f0000000880)={0x1000, 0x0, 0x80000001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x100000000, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0xac6, 0x0, 0x4e, 0x1, 0xac1a, 0x8001}) bind$packet(r4, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r4, 0x107, 0x5, &(0x7f0000001000), 0xc5) r5 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x74, 0x0, {0x0, 0xb00000000000000}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 854.734737] FAT-fs (loop5): bogus number of reserved sectors [ 854.748422] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 854.759095] EXT4-fs (loop0): group descriptors corrupted! [ 854.764898] FAT-fs (loop5): Can't find a valid FAT filesystem [ 854.773174] EXT4-fs (loop2): inodes count not valid: 201326720 vs 128 06:53:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800900000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 854.851935] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 854.877931] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 854.890196] EXT4-fs (loop0): group descriptors corrupted! [ 854.990897] EXT4-fs (loop2): inodes count not valid: 2432 vs 128 06:53:48 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x52598b636a9935be) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) sendfile(r0, r1, 0x0, 0x9) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x7fffffff, 0xfffffffffffffffc, 0x5, 0x6, 0x6, 0x9, {0x0, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0x51f}}, 0x9, 0x129, 0x9, 0xffff, 0x6}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000280)=0x8) 06:53:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x74f64c9f, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000002302000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:48 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xfffffff6}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 855.259823] FAT-fs (loop5): bogus number of reserved sectors [ 855.289201] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 855.302523] FAT-fs (loop5): Can't find a valid FAT filesystem [ 855.349499] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 855.370002] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 855.387281] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 855.397095] EXT4-fs (loop2): group descriptors corrupted! [ 855.404822] EXT4-fs (loop0): group descriptors corrupted! [ 855.413888] FAT-fs (loop5): bogus number of reserved sectors [ 855.419951] FAT-fs (loop5): Can't find a valid FAT filesystem [ 855.467797] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, &(0x7f0000000100), 0x100000, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@in, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f0000000280)=""/39, 0x27}], 0x4, 0x0, 0x0, 0xbde9}, 0x5b2}, {{&(0x7f0000000500)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000005c0)=""/213, 0xd5}], 0x2, &(0x7f0000000700)=""/60, 0x3c, 0x3}, 0x8000}, {{&(0x7f0000000740)=@sco, 0x80, &(0x7f0000000d80)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/142, 0x8e}, {&(0x7f0000000a00)=""/220, 0xdc}, {&(0x7f0000000b00)=""/63, 0x3f}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/145, 0x91}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x9, 0x0, 0x0, 0x7a6}, 0x7fffffff}, {{&(0x7f0000000e40)=@ethernet, 0x80, &(0x7f0000002440)=[{&(0x7f0000000ec0)=""/178, 0xb2}, {&(0x7f0000000f80)=""/77, 0x4d}, {&(0x7f0000001000)=""/222, 0xde}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/8, 0x8}, {&(0x7f00000021c0)=""/132, 0x84}, {&(0x7f0000002280)=""/249, 0xf9}, {&(0x7f0000002380)=""/161, 0xa1}], 0x9, &(0x7f0000002500)=""/194, 0xc2, 0x200}, 0x5}, {{&(0x7f0000002600)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002680)=""/246, 0xf6}, {&(0x7f0000002780)=""/196, 0xc4}, {&(0x7f0000002880)=""/152, 0x98}, {&(0x7f0000002940)=""/184, 0xb8}, {&(0x7f0000002a00)=""/170, 0xaa}, {&(0x7f0000002ac0)=""/132, 0x84}, {&(0x7f0000002b80)=""/219, 0xdb}], 0x7, &(0x7f0000002d00)=""/248, 0xf8, 0x1}, 0x6}], 0x5, 0x40, &(0x7f0000002f40)={0x77359400}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x3f5) lseek(r1, 0x0, 0x4) 06:53:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x69, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 855.535258] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 855.573338] EXT4-fs (loop2): group descriptors corrupted! 06:53:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800020000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 855.630306] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 855.663812] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 855.686117] EXT4-fs (loop0): group descriptors corrupted! 06:53:48 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffffff3f00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000700)='trusted.overlay.redirect\x00', &(0x7f0000000740)='./bus\x00', 0x6, 0x1) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000100)=@xdp={0x2c, 0x1, r2, 0x2e}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000340)="e0f52a2aaa3170ff3f9178d9db573a4565e988a94728a2fa2a5b0522b17d7221f0d0ef819ae4ef298880ba362e864e2d9623f3b72be3f2d091623b124626e5efefa3080a9b9a72bd0fced1c8fb2f939b2e9322bd5a8f3566ebf5bc3bf5972f5e6a7ee607ced9d2872bb2e5c41c312ece73a69bd61509d2011d6756735766d9188826a15936b830eb8016d1b1b4cdaea29638d9dd4ee16d81a68e", 0x9a}, {&(0x7f0000000180)="797ffae3cdfe4485394c7711d9a743050f97404ca7a3cf804e3d5e1ceb4d6f6f1114a9c69a039496eed061fa6d50ec4402ecf8bc86f00c7ef385f1e418b9a281e5e3ef5c857f728942c0411fa930e995c2d3151d3c0920fc3d326a372d2938", 0x5f}, {&(0x7f0000000400)="2e43a633ee45c07ac913b7a408859fa196b7bf90771f030ffae5cda6e5b80919a34811d85e20a196e89b52d6f9c34ca9fcbb5211da7bb142309f7f312bbe77b37dae07bdd56c7f037b20900c27e1250b1e8da4cab690dd71c09f259ae420e63f1b798380ee", 0x65}, {&(0x7f0000000480)="30c0bf06b33a1a042226681e5ffc874ef462e01757c1702c299ab8179575733973f5f9ac30f2d01a951c374bee4d22c13464e37fc5d5b3da042938526b10bf9d0d8fc39eb78eec6bec25fcd9e202be1e26d457cf03de343a00e58b1addbc584e1fe762b0f4379716752bd31deb6cdcf6ee521cf1a84e36f3521103128ff4b2074c98c41a066b663820efa7c14671bf028c6ca9304375226d29c4d85adfacee9625987d33352b38acc39ae398be7db7041683be9a1abf350f27a813", 0xbb}, {&(0x7f0000000540)="10bd354fe9750d1606e38c2d3e0acc956cdea0934d66a2b30af53dd4e228d944f9970efbde05e385b639769c30130e58e68f50c3a69a54e0f1c0eb14b7ce75e701dcb15218ff753c5b2ca404012cc817c198e68bc5e2b831ad3cf4f216e9b943ebb0d7741c1746dd0f9dc24c8e7042796843cad6310cf256d8bf09392441e688bfdfd00335ab7af4684e08984cf5acfa462588034c", 0x95}, {&(0x7f0000000600)="be4ad56b0b04a8bcd44549d9ba1cec340d03ada681612fe68f596b873ed6075a11af9e9ccd2d54a39cc7760424cda676fdd9898beae160706133aeda9f737980ea611beeedec4680bd36136513ed", 0x4e}], 0x7, &(0x7f0000001a80)=[{0x1010, 0x116, 0x10001, "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"}], 0x1010, 0xc0}, 0x20004001) [ 855.768652] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 855.846981] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 855.866029] EXT4-fs (loop2): inodes count not valid: 2097280 vs 128 [ 855.900582] EXT4-fs (loop0): group descriptors corrupted! 06:53:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800007000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x446, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 856.058814] FAT-fs (loop5): bogus number of reserved sectors [ 856.099211] FAT-fs (loop5): Can't find a valid FAT filesystem [ 856.144574] EXT4-fs (loop2): inodes count not valid: 458880 vs 128 [ 856.199106] FAT-fs (loop5): Unrecognized mount option "àõ**ª1pÿ?‘xÙÛW:Ee鈩G(¢ú*["±}r!ðÐïšäï)ˆ€º6.†N-–#ó·+ãòБb;F&åïï£ [ 856.199106] ›šr½ÎÑÈû/“›.“"½Z5fëõ¼;õ—/^j~æÎÙÒ‡+²åÄ1.Îs¦›Ö ÒgVsWfÙˆ&¡Y6¸0ë€ѱ´Í®¢–8ÙÝNám¦Ž" or missing value [ 856.257694] EXT4-fs (loop2): inodes count not valid: 458880 vs 128 06:53:49 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xfeffffff00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:49 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000017902000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="80"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2e, 0x3, 0x0, {0x3, 0xd, 0x0, 'security.ima\x00'}}, 0x2e) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x0, 0x6, 0x3, 0x3ff}, 0xfff, 0x7fff, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x8001, 0x800, 0x7}) lseek(r1, 0x0, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x7f, 0x8, 0x5, 0x9, 0x4, 0x915, 0x8000, 0x88d, 0x4, 0x7ff}) [ 856.355031] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 856.364245] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 856.377633] EXT4-fs (loop0): group descriptors corrupted! 06:53:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000902000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 856.537829] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 856.564061] FAT-fs (loop5): bogus number of reserved sectors [ 856.570225] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 856.580756] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5900, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 856.598283] EXT4-fs (loop0): group descriptors corrupted! [ 856.616615] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 856.628824] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 856.638697] EXT4-fs (loop2): group descriptors corrupted! 06:53:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x2f00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 856.681590] FAT-fs (loop5): bogus number of reserved sectors [ 856.728376] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 856.743042] FAT-fs (loop5): Can't find a valid FAT filesystem [ 856.768248] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 856.781827] EXT4-fs (loop2): group descriptors corrupted! 06:53:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x36c) fcntl$getown(r0, 0x9) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x248000, 0x0) lseek(r1, 0x0, 0x4) 06:53:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000025b02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 856.862171] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 856.873057] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 856.882913] EXT4-fs (loop0): group descriptors corrupted! [ 856.919947] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 856.983845] FAT-fs (loop5): bogus number of reserved sectors [ 856.989943] FAT-fs (loop5): Can't find a valid FAT filesystem [ 857.019325] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 857.033485] EXT4-fs (loop4): group descriptors corrupted! 06:53:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 857.055392] EXT4-fs (loop2): inodes count not valid: 33554560 vs 128 [ 857.081665] FAT-fs (loop5): bogus number of reserved sectors [ 857.094818] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000022e02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:50 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x3fffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 857.192770] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 857.257049] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:50 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x2}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 857.309501] EXT4-fs (loop0): group descriptors corrupted! [ 857.349832] EXT4-fs (loop2): inodes count not valid: 33554560 vs 128 [ 857.460735] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 857.497904] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:50 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000600020423dcffdf00", 0x1f) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r2, 0x0, 0x4) 06:53:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="802e02000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:50 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x3fffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 857.546774] EXT4-fs (loop0): group descriptors corrupted! 06:53:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x7200, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 857.639061] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 857.643570] FAT-fs (loop5): bogus number of reserved sectors [ 857.659558] EXT4-fs (loop2): inodes count not valid: 142976 vs 128 [ 857.667367] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:50 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x2000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 857.698605] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 857.717789] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 857.756815] EXT4-fs (loop2): inodes count not valid: 142976 vs 128 06:53:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807901000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 857.808529] FAT-fs (loop5): bogus number of reserved sectors [ 857.851483] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 857.879732] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 857.882740] FAT-fs (loop5): Can't find a valid FAT filesystem [ 857.913724] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 857.916502] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 857.957108] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 857.966410] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 857.968668] EXT4-fs (loop2): inodes count not valid: 96640 vs 128 [ 857.994304] EXT4-fs (loop0): group descriptors corrupted! 06:53:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) openat(r0, &(0x7f0000000080)='./bus\x00', 0x30000, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, @local, @dev={0xfe, 0x80, [], 0x1e}, 0x9, 0x8, 0x7f, 0x0, 0x7fffffff, 0x80000, r2}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6200, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 858.082389] EXT4-fs (loop2): inodes count not valid: 96640 vs 128 06:53:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800200000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 858.175423] FAT-fs (loop5): bogus number of reserved sectors [ 858.187902] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 858.197377] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 858.207780] EXT4-fs (loop0): group descriptors corrupted! [ 858.217865] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6900, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 858.316995] EXT4-fs (loop2): inodes count not valid: 640 vs 128 06:53:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800003ffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 858.413708] FAT-fs (loop5): Unrecognized mount option "þ€" or missing value [ 858.454118] EXT4-fs (loop2): inodes count not valid: 4278386816 vs 128 [ 858.549539] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 858.559577] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 858.569148] EXT4-fs (loop0): group descriptors corrupted! [ 858.609152] EXT4-fs (loop2): inodes count not valid: 4278386816 vs 128 [ 858.644112] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 858.653458] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 858.663010] EXT4-fs (loop0): group descriptors corrupted! 06:53:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f0000000540)=0x4) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000040)="f119c32ee9e3908997ca23320c93f2a0a4785b8d991aba474fd9463192d807ea2f2b6e77a018c58194d5ced14c0d75826706e35392362651451ddaaa", 0x3c}, {&(0x7f0000000080)="64f25ec10072a1e46de4981efb9be1c7cb226da55578299331b848dd5330c62ca7d549a1408b96", 0x27}, {&(0x7f0000000100)="ef9a7c09b90ef17174cb3c5feac1d60e337b89bd0d328a083e848aaad09cbf03a88b123dba4f75e8586b38a7223c91a25efa5e9d8b0dbcdf05ed00397a38200c935b4a31c66e1149cb11b2a8fa8f03d087907ee22cc678d2b8bdc76855807c6fed1f9571657ff8a32c834312fe30a0903968c6bf85cc1f92ced2fa7fe1eb893c2a90b13bf15e087e60225e7e2db44aff4cc0aa359780ae6cd00beba6f37a07b6d3509770f279e851879f6391aad44d0be52b688d6cdd55cdeb71f5bd2001896490e75b5e227cb80479c10bf86cccdcdf99bb327df11b466ad43ab79fb3e8470ad9986eb08fa6a8676e319b7d31ba8a4977c291013e529bda", 0xf8}, {&(0x7f0000000340)="03605d5fd4451853aec669a4d893512a17d1f5f2bd415d50be6f6391dd0fedcacc0e1bae399db65af41469c9de82bb178b6945e23617e3726c42a8c4134438d70cd794dc663d94a8355ad245f5a7e1f3b9b55f35dedd93104ae41502dbedbcef1d7572223205f53ae5ed5b9a446d7ca5ecc597d594bb513b21b0dc63f872d35594e7dad518e50b6acfe86db5e1e1711c68aee1b2dea9d6d776c1889ae45c54c4e1d83fc80be36a709c6756fc4f6a6637056ed71357b2302c0bed903e267638d8ae615232581c69bc6ad2f5eea0ee10bdbba584f1521f", 0xd6}, {&(0x7f0000001a80)="4357da73f047c38351b1b3da84a8a030d2dc869ed284e37ddfab63e005f2732afecb98c22a9d1a7e0dbb51556caacf24f4dff71335d142f1bea7ac381a76ab2cb5b098cf470bf242dd538ac78c13aa5d34f1ca98c1637f01f36061cb1448de3f1b795c289f822db86fd72a7b55127e54330eca31b99ab0019f094c244390c46f6102a88f96e76c8a8b43582579599dc958d58677a7291cd9df4b8156ae8eb248177864d9c9f8277589859a7e1fce8ef67025c4bb63aa7b77d0797d341343a8f5dda54dbbcee2ab97a0cfee4539f3089de5d3d266f60ffdbe70db0f4f9b614d9d62df28b40d32ce8d85eb46017748a1918ae6336ba9b94bd6df02e36bc0e3294137f287bd73e98f9fa62fc11ce2d163a0374cd53a964fc5f0379cb1009a2fdd38b1814956aabe2bd7f8e76237309c6265a4e61c1f628e2ec4535bc63781d4373c014aade2852b8e62f3480b3c1f76d5cea96eb4129052035e0fb9332382bf919c787a5c9fd3780233e93a6a3a6483f96ee6c4e1cb593bff5f73fa20a13de614bda7cee80fda909e115effde913d973f8ad805db3ce1c0ff3e807e019982c9180c2ceab3966472f62af48e851e0d0882c6b2e156e694e08391bb6bbbb161923ad19f343909f43bb7520baddfbbc8bb7903c8239af49dc29b61f6d6adcbd9493eecb2e7aebf23e52c7330930e1444d6463af9fd249631b21e94255b800152b36a516eeddea63ffe4e33b1b41ac8762bb311afecd3692f8f513d81580d6bf3b9472528d131328e5a309d2fffa7946a0bcb458eadd1b3bde1c399ae0b3e15685da750f6e30c93583a3c901785b4e2a03d3f0a31f0ea9bf243e634e7e49a2b64cf4e192583e1a45953d55410c393b7cb23ef6478ff192f24b6f6e1de4d1b702dd7adf7397e870c6873b90d1bc44f8c4b0d0b099c9ee21ee11c815cb90b37f808e9c3f43b71d42247d303dc910a458dad2d274cfef78374f9e473e98a56599a67ec489e3f0f09f668c299f268e6e611c4e0e76edf6a65f2a3a43c575c57d2224c8d2bda0670b231dc094d27a54efb2725761396c2395e56e83fbe0cbeb2eabda2f61f5eb25dd6ed8e5928a71abfdaa0d0e1aadb7732a94251ba761fac2ee82d0c1f2190b6fda8a24bda27f20d6f9e465ffb572df9fb3727418c19a1793f4f43f6b8a82e25b762dee58c6f4985f40db65d0aef32372a4eb64da4111b92fbf175c6c97f77fcb9ae5d8481e28d63a8007cfcc8708665fabd78f31f440df1c1c32de7a95ba0e6c155c3ed4f8defc841854b0d8f3d52dd569de99a96380c69e1fbd061834a0d5349806849707e74a4c547576fddb76c63ef8365754a311395c42dc84c3ec9a0c75b9657edfb185d24f590bd1d605a2e6320da623168220ced888824f7d99d8e3dc8793f8241b59b563ae90fb98b1704e0e1ac93f2db48cda5a6e87ef03d83408175cfc3c8de69b39a44d0f7c525bcd13f08436bce11ebe312d6713b320ab24910b13c9d7e080d81cc8beab1e98522e9b450f14565e73b1dc8bb3b77909de70a15a7ba5a0c6eff4a35885393193df2a12b494d9390032094a405f65f69c75c5d1f16d08db59bd7c2d0adc468a179db2e63d022ddedd6bf63e67013f33644ee9957972c4cd324bd740d98562e38b2efea4eb77412a5b1e83cfb0756eda9b4e03335eae9f624d72750921dc49c0da18d7bfd3ee573ab30a466593ff0ac26bef7dcf04494ddb94b9f42d6297cf9eb3ca2429fe08aba0de4ddf7ab3f65be95cb5793adea2c42d6ea753dd13c15d43103e23a2c1fe75b5c049e6ea68d33f1f87d805375b504f467f5b7d9d8eb3496ab178a813705e9c8a83cc7f409f4de38e30ec4fce048ffac2e680453c9f8e7361c197891b375a3df41ba5f6ad99eae363e1560295a6682ce4fb30ee16cc3e261eea434a94373fda299cb7abefc1f45f68a399ba4ff0237dcedb8ab3b547ea5c64014a2d390c95821472bba83f1b9dbd187c209912b0b736db814c8ccd384b772ee8d72e7948ebe6ed8ecc537b35cdb4ce6e1e014a1b0955a9e14fa6e3008beb3f898e7175e84a0369a35f2b94b83938a668c188a34ab9b6af58dbe080e59bced7496445dd7adbd88fdfd589004995763a346dd8803f4a378099bd3a638308a734ed21d35e94bd3c7d90ef7de1fcd0c77577b103584ad8730cbdb794333eee4a2cfb0eae342f91a7a3e99094d9e06b380d475b751dccd5cd7c4c09aebe99ab2fb983e3d271dbbab30145074f1dc511cdf10b9a8b65a2db52621f756b5a4c3ae67c15619400a07fa74aa9781b4875541d39f71e4b51f1237c681037e1502cd170a1c470adbad426e05eed89cbe11c6bad8d1f35db284cc67d62a55ad870edb6ac457aaacbde21d50d955f43290880ffc4810d698878e4ee9cbdcd736fabf07f0f58ad8830c5def43265dbfa99f742767287b54f5062d2e1155d171f7c36610eb350341bb7c5b56898940b4f1a479224df232632f9bf404fa90acba7165295ac8901692302b407806492af2d8cead8e1e34272e06531fd341f89e005f89fce3691a18e5f70e73692033617041d282249a0a61c68dda28d7d6d3c5dddbdf771b009ebd77b75631678869bba2b7452a4f5847c6f0d1ea114afd811a8a8e452ef2264ee2f2f3d4d54188122bc066fd43d8b4a7e541a98ef50ffb616a6271599fbbebedea29f31bba09dbdf0249f7880ae105fa19e044eb23acef9c6df22c66b7f9fcd6f24985112828aca99189bf8625bd11a8dab7d3062465ec9f8c63d59e546a71eaec4480dbfb8cf182965796331a04fe7a2e267d820f94cb31df09fafd1d19eea83c1e2886d0865059818cf5e87c42e173f70dd3e787cec4419e0981c52930953c80a44ac32ab372d27d72f125c205a7ae71f7a6d2dbd5d2a55d246108d66b4216cc0e4664d7c009dc2d91baab0d906ecfa730702bb90fd416c02078502c3e120fa1a5246587e55fd4d01e6edf79ce7fa3e59a00bb4bd5e091058f48ef76b5c3a61ae426bb35e511d7901268ad123b697dcaf22877825d7254eda4039aeb287b8457cf25ec87108939fa73af1060533cc062a27bd0e816e0a0a09c35e122bcdd9e38560761a6cfdd03ede2e408b8d3d80d909affdf3ede4fcea0e83f6449d425d3fef3f8de0e1fd996370d185cf4953d105cd0f99fee32537286156c9900310f1ac239012bc57d9aba097bc70cc3d8f2bf9b99d0ad52375d7aae2e1303c4e606381ea4cbb605d8a71935d09909d52579a512182cd912137f4eaab46db12cb2fa3287f50304c11ffb306407c3d5303e94bd6bc2157492e815db4d255421bbf9c5711163accb82439915cbb2c4f1727a314573d141186981760b8e4284973a415e963616c64034521e0a84dd5df57e94eaead52037458f77ddb0d7ef9b65917c558163c1009ce1a390d4c42f7785bf8633dc4be5a94dc35ee34f17d652262b60f2fa371af9ad3870809c4258e260317b04a48e0a4018aba451f78d7b2813fbde22baff836fd520c7f17a8e06e5833cfe7b0a14a881eeed098143f8a867b818df83283a50ecb4a9c91256bc7e9e777a052c28fa062524d8b41908ad35e27e05c0afe40921abf9d5ffe0ef046eb539c1d58fe0f0f1abf01bf178337d0a6fee74461065e992f42766039616a640e787b52a2d2958057812998d50da395f04e1ee1ee6d0db9348e6fae3429768420dd1639d6cbd7fe44a34994784371e4c78ee2208b6b1e9bd946bccdc54f37e8067469ce2f0d08ddce8a11507f77c2fe5e63461c0abb6f91b840f0599530a42929aa9f6ff4cfdb2d3edbaabb6b951f43d7fa4c3d196d4816f4a31332232b46d85b6ccf5ab03d79438d544831802862b8a475816f4221e88b5c676febd7ce20af6293b4e645cecad28fbf233931bde1f91a1d0abb782d3d93a9409ff77437cb7a8b8c70b559fe5cbb520d5cb8a69b2f2f15fc13358a3657e0267cbf4b5b807eb913e9a52ddcd3f7f0900e9d824ce81d744d2ff0ee6a98ed4e9d0b90ff487b04196676383b2576c36e332e259b9761c2b13dae7b9c444ef6259313d9033485a56016cc8bae1dd826aac409b1e585df1c57c46d2b86ad68a614a9b4f0d4061ba07b8564e139badc9ca1697a77f4b2bffa7eb3194f9971477c591e0aac111375c84f3ba1772f57e16780f8f16f81b74a12f96b356a2bb705d605f9e70fd45cb8404b82ef11ff41709a5c388b4b3a92ec1f7f11df10e534139ed5a780a97a12287648980c6ed00dff73ec0fa55eddb6d54d1a55cbab7a4e6bfaeaec4dd95c467df0d97166057de93ceb983875767e3c65a5209cee427fd4fd700c56358454b26ab0ad551913c38fc3270bf1a137045ad458313a539787598cdc3eedf21b0c99f5c88bcc70efd89f0bd3656d8bdc390387f58a84e7f4306db92bd2398dbac6c0f339ac98a54ece5ed3ff6887e09f2aa3cf58f387f718869c5e7a315a6169afe48615f7bb507a8474bc67c0d3ab6408674dfc477a6cb952401975bbe3dfdaa1561d1408e72e7be26c06c7d3da47a3812eb71bc88d4a93559c659aac0f68afa3ab3dde33d6716f30e79f042aa9338b7827cead17da651f9d5a600c73a2e5490079dac425f38b9d3fe24cf16d6fc8e118e1e516c4abde18698b6d913c3cf00ee41e6afe66c4f52b903a198939b6970934f165b1c8d3bda32edb2153d03b4ba7a9a9734e009d6c4902bd4e30fd60ae67148d25235522d67865f5685e7363518d0ec27b73cac4ef39ed56246f5bfe112b4cba8beee298d72c6805dc9f7cb5fd735060def27116f59d4e2eca647ddf86365161f0224fa8bbeac904b6c415d5472bfaab12787ced2d24f56a944f0a4fe7e3a687f1fa6327ac3ed51d61fb04cc64aaac736b5752bda2a7dec91377b8ea197b621328de41a762cac031623c5ae7b34ad806c427228508f8a13dc3006ea5b14e3572b78592a101f80c999db3bddfaa179183c84a228cbbaeca79e70175ee1ad9fbb06459773f33150e875e960f781be9f48eba24427622fd705af2ee9a3dac71c63e2164699c3f10e2a6102f7310c66b55ed41b144b7f5acf49f758d8c5b76764a85b8f25fdfae418d164c23e88e0a18894cf36dbb6181b6766569545e28c23f43e40f95d98670697849410f4b99c76d71cabb555058ae451594e164d7f23c7bafc6160f9f6f5965623baec6caa363eae8cc229d7768cc7f6a9c3bb2b5c71c4b76df0353b2c084b47e7236c33cfc6af47dac508dc6d40774dde0f0d75890a89dbe3478f5dc3ab1d31587e4e5a13694d03c654cd576e6e631299430cab43b76edeea75fc7af299d9f950fa7f45ac00f6122bb98bf30f32b867cb9016e876933b28edf801fb49f360deed3ffa2f545b8cc3008c46d40a5bb2581054f2270571b9d08bbaa82b19d197889d5f59efdf2dd402cf41c653aeafb600871aa3ad8b69c3e93149a598ba9d7930754abe920719486f01559dee5db6cde23ca17b993b16f130a6e53c8198979fb41e3f695814e37b64daee2666acea210a391d27ac5d2a2fc6ed77c84391dfbcd2036f8c1a013a9d6252304169cfba85c12b07cac27690a88680def87c05de13264d2eabf2617541b1df252ce1891fa620a92d192b14e27b7bef98b33169e007f8aba807d8d5603f8fe8d26ea0cc1d80001effc62c5376cf6422c979c8e22c1bf35d05846affb677199012fcca4cc4e830a295eb24442b3b5f924a5fbd6dd320093eea4162aec03e025fa36d2dd574714c6f25ba88d1eb12aef68d70614a3707b66f341aa1a33a1f393dcd2dd07ca95cab64ce65444bf411", 0x1000}, {&(0x7f0000000440)="9af063ce2f8099625581a72de3dc25b6eccd63758920cfe6611c74b5b9037646ec11e28f07b5582602721afab63a1b492a64e3c86fa4634d290d32dcffdf46f035c0299ef84b6b3c", 0x48}], 0x7, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000580)) lseek(r1, 0x0, 0x4) 06:53:53 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3300, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x2613, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000007a02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:53 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x1000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 860.859739] FAT-fs (loop5): bogus number of reserved sectors [ 860.874996] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 860.881038] FAT-fs (loop5): Can't find a valid FAT filesystem [ 860.913115] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 860.954808] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 860.977315] EXT4-fs (loop2): group descriptors corrupted! [ 860.987612] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 861.031366] FAT-fs (loop5): Unrecognized mount option "`]_ÔES®Æi¤Ø“Q*Ñõò½A]P¾oc‘ÝíÊÌ®9¶ZôiÉÞ‚»‹iEâ6ãrlB¨ÄD8× ×”Üf=”¨5ZÒEõ§áó¹µ_5ÞÝ“JäÛí¼ïur"2õ:åí[šDm|¥ìÅ—Õ”»Q;!°ÜcørÓU”çÚÕå jÏèmµááqh®á²Þ©Ö×vÁˆšä\TÄáØ?È ãjpœgVüOjf7n×W²0" or missing value [ 861.045983] EXT4-fs (loop4): group descriptors corrupted! [ 861.064733] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800060000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 861.074228] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 861.085637] EXT4-fs (loop2): group descriptors corrupted! [ 861.094282] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 861.113073] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 861.123357] EXT4-fs (loop0): group descriptors corrupted! 06:53:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0xfffffffffffffffc, 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) 06:53:54 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x840, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xfffffec7) set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) r3 = getegid() fchown(r1, r2, r3) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xbf00000000000000, 0x8, 0x1, 0xff01000000000000, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 06:53:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3b00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 861.327587] FAT-fs (loop5): bogus number of reserved sectors [ 861.334335] FAT-fs (loop5): Can't find a valid FAT filesystem [ 861.358783] EXT4-fs (loop2): inodes count not valid: 6291584 vs 128 06:53:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="802d00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 861.393735] FAT-fs (loop5): bogus number of reserved sectors [ 861.415230] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='user.syz\x00') lseek(r1, 0x0, 0x4) [ 861.624166] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 861.640331] EXT4-fs (loop2): inodes count not valid: 11648 vs 128 [ 861.686420] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 861.737622] EXT4-fs (loop0): group descriptors corrupted! 06:53:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000602000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:55 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:55 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x3fffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 861.999787] FAT-fs (loop5): bogus number of reserved sectors [ 862.038584] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x429, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 862.048068] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 862.058547] EXT4-fs (loop2): group descriptors corrupted! [ 862.092984] FAT-fs (loop5): Can't find a valid FAT filesystem [ 862.151319] FAT-fs (loop5): bogus number of reserved sectors [ 862.172765] FAT-fs (loop5): Can't find a valid FAT filesystem [ 862.184643] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 862.243257] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) socket$vsock_stream(0x28, 0x1, 0x0) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x2c41, 0x8, 0x14, 0x1d, 0x1, 0xfffffffffffffffb, 0x0, 0x15f, 0x1}) lseek(r1, 0x0, 0x4) [ 862.285679] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 862.302250] EXT4-fs (loop2): group descriptors corrupted! [ 862.346005] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 862.355872] EXT4-fs (loop0): group descriptors corrupted! 06:53:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ffffff8c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 862.386789] FAT-fs (loop5): bogus number of reserved sectors [ 862.394080] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:55 executing program 4: r0 = request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='/dev/input/event#\x00', 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="4fdf08f843ce5ec721d554f856b19d4c6bc7d8f929f3268390179f963f232bd4014b79b0b0bd1211a1d3af8c64948a73076edc6bb50d1ab4694aa92a35609f1c26d9f9748ea0d4845ce7859dd8425b45dbcdf6ca02d3f57f1628180457f522c93a22bb3043247149f5d5508b116a6c26cb83544c653d136add662481185ed5afe1acc257e852330e", 0x88, r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x14104a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r1, &(0x7f0000000080)=[{}], 0x351) sendfile(r2, r1, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/216) [ 862.498761] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 06:53:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4800, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 862.539531] FAT-fs (loop5): bogus number of reserved sectors [ 862.554764] FAT-fs (loop5): Can't find a valid FAT filesystem [ 862.573955] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 06:53:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x0, 0x0, &(0x7f0000000a80)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/101) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000003c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x5) r2 = dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_to_bridge\x00'}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 06:53:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8142, 0x0) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2140, 0x0) 06:53:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807fffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 862.877543] EXT4-fs (loop2): inodes count not valid: 4294934400 vs 128 [ 862.893870] FAT-fs (loop5): bogus number of reserved sectors [ 862.908260] FAT-fs (loop5): Can't find a valid FAT filesystem [ 862.929502] EXT4-fs (loop2): inodes count not valid: 4294934400 vs 128 06:53:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="801004000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:56 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8a00, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delrng={0x10, 0x14, 0x0, 0x70bd29}, 0xfffffffffffffee1}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000f0c99f3d653c00f0ff8da499df000000000000000000000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000580)}}], 0x4000000000002cb, 0x22, &(0x7f0000000a80)={0x0, 0x1c9c380}) [ 863.037311] FAT-fs (loop5): bogus number of reserved sectors [ 863.070815] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 863.109814] FAT-fs (loop5): Can't find a valid FAT filesystem [ 863.119921] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 863.148839] EXT4-fs (loop0): group descriptors corrupted! 06:53:56 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:56 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffc99a3b00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0xffffffffffffffff, 0x0, {0xffffffffffffffff, 0x3, 0x5, 0x3, 0x80000000}}) lseek(r1, 0x0, 0x4) 06:53:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x1f) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfff, 0x10040) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000280), 0x4) ioctl$void(r1, 0x5451) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x2, 0x1ff, 0x1}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 863.289528] EXT4-fs (loop2): inodes count not valid: 266368 vs 128 06:53:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4200, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 863.398696] EXT4-fs (loop2): inodes count not valid: 266368 vs 128 [ 863.437406] FAT-fs (loop5): bogus number of reserved sectors 06:53:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"53f7df813f39c9d6267eff694d75b742"}}}}, 0x90) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x22001) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x43, "cc147abb4cfb1f1b3c8bd7728c843769ceb0ee3045ad37eed407b64fe768920b31ac157fd2bebb62ba3dca7d7ef79bea017240221ac7ec29b787e6252c5e522e4cc191"}, &(0x7f0000000180)=0x4b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x51, "83fdb5a32b962fece21591468e9d2204bcc09fa83314ed29a82e2944229a0f4a64ba77edddaf2135d3bc6aa99be1c8dfcec3ebbaaced431c362d3d6e3f6be85a35ed9a9a7f6631696f0478fa7edafc5627"}, &(0x7f0000000300)=0x59) 06:53:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f6ffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 863.453068] FAT-fs (loop5): Can't find a valid FAT filesystem [ 863.536990] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 863.553325] FAT-fs (loop5): bogus number of reserved sectors [ 863.562749] FAT-fs (loop5): Can't find a valid FAT filesystem [ 863.577196] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 863.590360] EXT4-fs (loop0): group descriptors corrupted! 06:53:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="8099782134d0d3dcf6c099ff6e6c32b19a201b249fab85cde1020b17a63b1ec9a6cd67d070f3620b92561d754d0936a7d74879b9b5fe6d3bdd9c666f63aed9cd91ac05decca61f24352aacc884f4b98fcd4e58f4c3ca92ead343c28311a27c8bc70beba1a7a67ee7de14d02aa91cac0495e4538544419109573e80a19a874476a97d432574e65112f98c54e5b473425487aa3210c39d1953e7a18baf6f48011e652e744b574c25ecf141030d07102194f1ed9127b6db690288fd4c320c17bbfda8b19f6038e2bc9191cea658d4c7c30d04bb3b5cec0bb1a56305241e4ee7886db342fde7ee35fb14", @ANYRESDEC], @ANYRES16=0x0], @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES64, @ANYRESOCT], @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYBLOB="ae605fdfbd4fc272154ef2734b8ef2d771f91b476d5df5cc5ec713e14d5366f08a17c09d67", @ANYRESDEC=0x0], @ANYRESDEC, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC, @ANYPTR64, @ANYRES16, @ANYPTR, @ANYPTR64, @ANYRES16, @ANYRESHEX], @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYPTR, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="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", @ANYPTR64, @ANYRESDEC=0x0]], @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockname$unix(r0, &(0x7f0000000580)=@abs, &(0x7f0000000280)=0x6e) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000840)='/dev/snd/pcmC#D#p\x00', 0x1, 0x410000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, r2, 0x8000000}, 0xfffffffffffffec5) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x2b5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0x5, @dev={0xfe, 0x80, [0x140000007fffeaa3, 0x0, 0x0, 0x329, 0x0, 0x0, 0x0, 0x0, 0xb0250000]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x28, &(0x7f0000000300)={0x0, 0x0}}, 0x10) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000640)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={r6, 0x80000001, 0x18}, 0xc) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0x6) close(r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0xd}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000940)={r7, 0x8}, &(0x7f0000000980)=0x8) add_key(&(0x7f0000000880)='.dead\x00', &(0x7f00000008c0), 0x0, 0x0, 0xfffffffffffffffe) [ 863.640698] EXT4-fs (loop2): inodes count not valid: 4294964864 vs 128 06:53:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5f00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 863.757771] EXT4-fs (loop2): inodes count not valid: 4294964864 vs 128 [ 863.791570] FAT-fs (loop5): Unrecognized mount option "18446744073709551615@" or missing value 06:53:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000006802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000840)=[{0x3, 0x81}, {0x3, 0xfffffffffffffeff}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000480)=0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) r4 = getegid() getresgid(&(0x7f00000001c0), &(0x7f0000000600), &(0x7f0000000640)) fstat(r0, &(0x7f0000000680)) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="07000202630000e60c0466583d06607fd9557f8834c0a0ee5bf50771c1a5c7d6be2eddcba0f9ac4b1def3758034c8453490080000000000000c2d1605873b193ad1ec7372c9fe8a577fe3ce8023fb2949cb09edd5f1842d0500426f39674c83d1107aeadfb76deebcbbb54bc4968af7152e53a062137970ca633adea98c52b15e2df2911ed0d4c912b000c186566", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="10000000000000002000000000000000"], 0x44, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)) process_vm_writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/169, 0xa9}], 0x1, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/116, 0x74}, {&(0x7f0000001ac0)=""/243, 0xf3}, {&(0x7f0000001bc0)=""/165, 0xa5}, {&(0x7f0000001c80)=""/112, 0x70}, {&(0x7f0000001d00)=""/60, 0x3c}], 0x9, 0x0) getuid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) socketpair(0xf, 0x6, 0x80000001, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000001e00)=ANY=[@ANYBLOB="eb000000069b5c198fa4c2969d3bc441669e6d409727b8b48f125fd6f44fc7202175135871617bf354197f1352d5c427e698ce6325a56c56379bf5eef935bab56af5caaee4fcfa08b1c6f7e70302bc42c3ec6943ee2b0a8b59efe7540530813638ce2104350706d166c5afd03177b553025c5ebc4863050100009e1f0aa81298464d6c999e2966881bfdb1a80f929935034cd5e78082dfb1387c90daae74ee30ca49fefc5d0cfbe67ebdf05ef0919edbf605b953e88726b932266778e5c28491e49f7659cf0bb1bb46553b2c636067d3070af2e467f4091a05d58c8f0bc948a7ae85f44857b514a6258ab4a2973d74fa"]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)=ANY=[@ANYBLOB="050000000d00000000000000000000000400000000000000000000000000000000000000000000000000000000000000010000000000000005001a00fe800000000000000000fffe8000000000000000000000000000ff0000000001000000000000000000fb0000"], 0x68}}, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x2) close(0xffffffffffffffff) sendmsg$netlink(r6, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x4000080) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x4000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000280)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f0000000140)) [ 863.923755] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 863.943999] FAT-fs (loop5): Unrecognized mount option "18446744073709551615@" or missing value [ 863.981572] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 863.992011] EXT4-fs (loop0): group descriptors corrupted! [ 864.066603] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 864.085610] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 864.095323] EXT4-fs (loop2): group descriptors corrupted! [ 864.185578] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 864.219254] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 864.263585] EXT4-fs (loop2): group descriptors corrupted! 06:53:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f00000002c0)=0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={r3, 0xe27}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000001c0)={0x7, 0x3, 0x5, 0x0, 0x8000}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10000, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="0100050032007abb7f9b01006f170301000000000000aaaaaaaaaabbffffffffff7ef5dfcf04609c54b63a625b58d2ff449f99f17f19d7f7b47dcdf429a4b9ce70cbc7008bfe0bd0b098735f24121eabc5512f19"]) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000340)={0x20003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x20, 0xd, 0x5, 0x7, r4}, &(0x7f0000000080)=0x10) 06:53:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:53:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x385, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:57 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:57 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x8cffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ffffffeb02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 864.454459] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 864.463321] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 864.487485] FAT-fs (loop5): bogus number of reserved sectors 06:53:57 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0xffffffffffffffff}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x20, 0x0) r3 = dup2(r2, r0) rt_sigpending(&(0x7f0000000480), 0x8) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000340)={0x10001, 0x37c, 0x4, 0x8, 0x7fff, 0x0, 0x7, 0x80000000000, 0x37, 0x4, 0x0, 0x3}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) r5 = getpgrp(r4) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000300)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000580)={0x1, 0x2, 0x3, 0x0, 'syz1\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, r5, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=["4c65746831812d2900"], 0x9}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000380)={0x9, 0xc3, 0x1f, 0x400, 0x0, 0x6, 0xffffffffffff7fff, 0x8001, 0x8, 0xfffffffffffffffd, 0x2}, 0xb) init_module(&(0x7f00000002c0)='$$\x00', 0x3, &(0x7f0000000500)="4c65746831812d2900") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000440)={0xfffffffffffffffd, 0x6, 0x800, 0x3, 0x1, 0x10000000007}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000005c0)="f302d57fb67c4293e3b47cb914461ef795e41a63d207b6c60e2a355810547eb00ca7fa031e3075", 0x27) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000200)={0x1}) creat(&(0x7f0000000540)='./bus\x00', 0x0) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000600)={0x10000000}) lseek(r1, 0x0, 0x7) gettid() [ 864.511953] FAT-fs (loop5): Can't find a valid FAT filesystem [ 864.523075] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 864.538580] EXT4-fs (loop0): group descriptors corrupted! [ 864.585060] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 864.595835] FAT-fs (loop5): bogus number of reserved sectors 06:53:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x74f64c99, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 864.626045] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client='access=client'}, {@cache_mmap='cache=mmap'}], [{@euid_eq={'euid', 0x3d, r1}}]}}) fchdir(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r2, 0x0, 0x4) 06:53:57 executing program 4: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r1, &(0x7f0000002a00)={&(0x7f00000003c0)=@xdp, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1, &(0x7f0000002900)=""/213, 0xd5}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000440)=""/4096, 0x1000) getegid() fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fc430518a4d04031c5305a20d7010000000cbc4ab66d83e193253bf1a4a3cf65782801014d0266c5aa19785c8e0780570b927b60967c4e7a5b7a1a60a0b6feb0190db97faa92227d60c423a4f8930d0c431f646ab00f3b62c86f4c80ffffffffffffffcf1ef1708ceda7f997075594cc030af1f430ac9ca592888ddfbec3f696c4de40c610b70c9be328e10017acc981c643a255fc377d2cd252ce742fe235f341183f8b7cb99e83e47611b9b17916622dd626dc72d989b82e6351eddd2683f0a921cefa782cea12a065e49e176a68465b0736e1233324b2b02886"], 0x3) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) [ 864.674315] audit: type=1804 audit(1540968837.868:106): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir014207740/syzkaller.ewwIKT/773/bus" dev="sda1" ino=17405 res=1 [ 864.728702] audit: type=1804 audit(1540968837.868:107): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir014207740/syzkaller.ewwIKT/773/bus" dev="sda1" ino=17405 res=1 [ 864.752816] audit: type=1804 audit(1540968837.868:108): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir014207740/syzkaller.ewwIKT/773/bus" dev="sda1" ino=17405 res=1 06:53:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000a02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 864.861772] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 864.886246] FAT-fs (loop5): bogus number of reserved sectors [ 864.899547] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 864.910808] FAT-fs (loop5): Can't find a valid FAT filesystem [ 864.933005] EXT4-fs (loop0): group descriptors corrupted! [ 864.953958] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 864.975245] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6400, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 865.013510] EXT4-fs (loop2): group descriptors corrupted! [ 865.023478] FAT-fs (loop5): bogus number of reserved sectors [ 865.051142] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x37c) lseek(r1, 0x0, 0x4) [ 865.185278] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000001c0)=""/130, &(0x7f0000000280)=0x82) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x401, 0x40c82) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x1000000005) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) [ 865.240988] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 865.268086] EXT4-fs (loop2): group descriptors corrupted! 06:53:58 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffffff3f}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 865.398395] FAT-fs (loop5): bogus number of reserved sectors [ 865.438551] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:58 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800048000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6300, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x2000000000000000) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f00000001c0)=0x800000000000002, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) r2 = getpgrp(0x0) r3 = dup(r0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000200)=""/4096) capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0x7ff, 0x4, 0x3ff, 0x3, 0xc9, 0xfffffffffffffffd}) getpriority(0x0, r2) [ 865.541525] FAT-fs (loop5): bogus number of reserved sectors [ 865.563276] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:58 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20080, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000140)={0x2, 0x1, @stop_pts=0xad30}) r1 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2400) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80003, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xb29, 0x0, 0x8}, {0xbff, 0x0, 0xada2}]}) [ 865.610277] EXT4-fs (loop2): inodes count not valid: 4718720 vs 128 [ 865.676447] EXT4-fs (loop2): inodes count not valid: 4718720 vs 128 [ 865.702406] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:53:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getgroups(0x7, &(0x7f0000000540)=[0xee01, 0xee00, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00]) lsetxattr$system_posix_acl(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x3}, [{0x2, 0x4, r0}, {0x2, 0x6, r1}], {0x4, 0x2}, [{0x8, 0x2, r2}, {0x8, 0x7, r3}, {0x8, 0x4, r4}, {0x8, 0x3, r5}], {0x10, 0x4}, {0x20, 0x1}}, 0x54, 0x3) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r7, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) 06:53:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000702000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 865.745575] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/17, 0xfea9, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x10000, 0x4, 0x7, 0xfffffffffffff326, 0x5, 0xfff, 0x100000001, 0x3, 0x0, 0x286f, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x6, 0x1, 0x8, 0x100000000, 0x80000000, 0x5, 0x5, 0x200, 0x3, 0x3, 0x9, 0x6, 0x7, 0x10000, 0x100000001, 0x200, 0x0, 0xfffffffffffffffc, 0x3, @perf_config_ext={0xfff, 0x1}, 0x8110, 0xb1b, 0xffff, 0x7, 0x6, 0x80000001, 0x1}) [ 865.808403] EXT4-fs (loop0): group descriptors corrupted! [ 865.853665] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 865.876789] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000007402000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 865.912055] EXT4-fs (loop2): group descriptors corrupted! [ 865.920826] FAT-fs (loop5): bogus number of reserved sectors [ 865.949080] FAT-fs (loop5): Can't find a valid FAT filesystem 06:53:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2}) r1 = dup3(r0, r0, 0x80000) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000100)={{0x4, 0x1}, 0x2}, 0x10) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140)) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x800, 0x0) 06:53:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3e00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 866.056358] FAT-fs (loop5): bogus number of reserved sectors [ 866.075250] FAT-fs (loop5): Can't find a valid FAT filesystem [ 866.153418] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 866.162489] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 866.187293] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 866.210608] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 866.230333] EXT4-fs (loop2): group descriptors corrupted! [ 866.252433] EXT4-fs (loop0): group descriptors corrupted! [ 866.298038] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 866.307239] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 866.322473] EXT4-fs (loop2): group descriptors corrupted! 06:53:59 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x3b9ac9ff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:59 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:53:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) statfs(&(0x7f0000001c80)='./bus\x00', &(0x7f0000001cc0)=""/16) ioctl$TCGETS(r0, 0x5401, &(0x7f0000001c40)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./bus\x00', 0x3, 0xa, &(0x7f0000001a80)=[{&(0x7f0000000100)="02e9b9b2fe4ca53e53ff334cb14777817aa08b23e5570c8b5b1b95201f16080c6b3ca55a7dbe5ab341d496cc3c52bf41da75e5b2edee044545ca64c52b6532fa242f6488fc4aa0140dd02949f26e5181b48fc7075b22cd6f26100d999c816692eb6ddffb14d2491be16508158df0e5c74182836a5fc4fe0fd077981f92030a2d4ff502e558d7ab0c38fdcd08587a0db8ee2c0d026f363d9f0391bd101146966dedbbd748de0de11f12d1", 0xaa, 0x4}, {&(0x7f0000000340)="06b269a12db4a5c6c3abf1cd9554beba350a39e2330c3f43e5307c9a20edb95346e3f45a3b41532ecb2d47337e2bf0f7f99dde315cad27d2f0e84bebdaa326a67bc8c0ebcc9ad8321d04017ea20c12fb37faba150090323aa488ca3251ca8428b800e8d0a24958cd1f58906013a67c29845c657df6698c8206df52190718396f3a7bf98177da12c75c3488782af001466236fd6001f145dbad794ffd7f644da267c6f4e806a18bdccb64c55a6d9d6b9db77dab2c4e9ea2f0136f4d0e", 0xbc, 0x6211}, {&(0x7f0000000a80)="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", 0x1000, 0x275}, {&(0x7f0000000400)="99008dd85475ef33b6790611f93ce19438a7c5a685c08f10fbd9c31a2af4935b25592036d0002aa684918789cae298c3f8e3a47a7ce49a28aa0e457e9a9c501c9da1837d98fd930485a4e125837c38078458d1adff08b909f9cd", 0x5a, 0x9}, {&(0x7f0000000480)="be19d8f59194af3d9b613a2bd2ec7cf1c5dafde600faadf41c2bceed2fbbe40c33f85e7120e3cb5e5f3253abf8bab7f6d4107c4762a160a899110c3cbf4c80c8e8a05e5df2fdf2a9bbbc29de8ef145455311fd5c68de7081ae2c4fd01898d06fe5d3f277b98273306d47d857c58bec99144fbb0930b1ee375007063465b18a1cc3b1d6047edd2adbb3d1577caeeb84556719a85a653f7c40c072a7180449167cd10eb0bf3889309b3743ad436515c6a4165cc34eed6b85fe26b9b2f938f9ddcf57b972e6e952cef1bc5be3463edcf7d7c56c3c92d0284269d83d492b5b574c", 0xdf, 0x45}, {&(0x7f0000000580)="b33d4c841f23ad84179b080605d19146073ca38e6bb783d4ccc7124dba95a03ef264471cf33f38eee503424a4808f77555eefdb42e1af342fbb1cae8954fdf0e642e92b41690025fa115526e5dc12fef16d9b6294c1dc5099a4f5058097f6abe000914aaad6efbdbb31de513c4e5c6c8b6a5abb52f151910efa919721967f38a08a1fc8294f286c3d7a6d80b4ee394476defd9efead8648ebd0ca2d2652f27208d9c8ec5b31ffe2068e2459580a43fbcb486c995b30f8071ae0619554715d55d4df9edb4cca8ede38a642b0d9c1f2e41f2564a03c4a9c89782b2ce7bc25c674d01bbe5b252ba201edb8fe776986abe59577e1e30fc83", 0xf6, 0x29}, {&(0x7f0000000680)="105c306fc3b33ea96aeb9de611f6698d82ad8bca3d8879bcae11f0f07df639870a4c1935df6f00f02a99724dd2dcca9079010c8e3cb04f65910e1cd34374ee8c88fcdfb9e04cf213d6e6762eaf83bdf9ed54e3c92f04322da4e21eae50026146d4d13b5d326153a21dda484f5912127837c6b6c0927f434dbaf48c1277a77322622af1d17ea1ac07dfeaed90196dc65c0fb5d78e2b3d79ffbabb3618f8ee1a41f379c09bd2a9a2cf389f39530473c6d7c03299d94e1133e8e7c0c7403892724efb78dd645886f954d382ab628233b897838a9dc9064d9c18d3b67cdbe58f10509c88cbad108f", 0xe6, 0x8001}, {&(0x7f0000000780)="94b85408f04a63ddd6e3d0b2936653c246722baffbcd1c81d9f2e0f852ef0ecba4a7830449740dcabb7a799c5c1e9b2704c5c65bcf2f534f1ed30ad53edee97b37aec4ff136ed94dcf48e40c583724aabc4dd5e553cd19a7262afe4baea46bb75764c6450a1537994d3bff095e557d59b4ad2ba167e852b2b7453feb25b42193a84d1174c9c8eae4286fe5ed9509efb2516a9c0ed2b4d2b73233be37d65a7f9fe8785127a5009995ee0390b5d525694c", 0xb0, 0x101}, {&(0x7f0000000840)="a1cf0ea575b91e0958cd30e9e7ef6fac6988f0925c83dd84d8c9464386bc0d0f9b04a6da041e593b04a12492946ea009447d9b1d7be926429f25871f5ef8d45ff07a8f8829c82457bd8b62bb98e8f33f01e98810222e54d12155e3cea46a62fe3ec61647130b937efaf9f544aedd9cf287f8fa4d9a04e329f2a070b9151dfbae46dea4a9f93dca68f71b115f93d91be6a085d950013a50c9396aa9b16528f96caad7cc82f1a1e30414ccf4164f50a36e7623881afd0852c7b4953609be54e00439d8e51a55bf0bdc6138f5def0610f60c9352f691beda99e", 0xd8, 0x8}, {&(0x7f0000000940)="0fc2e233bf72d47f2c53772b4a82033749414f927a4a490c27e4570a07f2f2ac6bd479be6559e2623a2aa307778fd8e9e4bbbf7e5ea7d700f3da932a624b3a928c86b1d749a56ffc154b8e8ad9c2ca0ac80327171e827740bc65f673a234407580f4310db58a424635f777b4b35dd7f88f1b26938876440a18d07e2635643ab82cdf3b3d8d83e8061403bb2e31e0d85249bf06064fda86598ff7d85d4dcba7327075335a7d81539b67b38f6a7706b135cf65c2ba8939098d66f1c3c921ee441df8ccde42d87db1ce091e425af41542ffdd3c5c6b33d6b4e8562fc3", 0xdb, 0x1}], 0x2, &(0x7f0000001b80)=ANY=[@ANYBLOB="6d657461646174615f726174696f3d3078665c66666666666666666666666666392c638e6e746578743d73746166663c752c666f776e65723c", @ANYRESDEC=r2, @ANYBLOB="2c646f6e745f61707072616973652c7063723d30303030303030303030303030303030303030342c66736e616d653d5c656d312d7472757374656429656d30656d3173797374656d47504c8c6c6f2e2c00"]) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) ioctl$RTC_UIE_ON(r1, 0x7003) 06:53:59 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffe9, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0a9e3ada62a992d090816dcb378400fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) set_tid_address(&(0x7f0000000080)) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000280)="6d43dd1b3ab9075e736fab51ba64a68f2072dead1c253da335ab9d45e3353005c59472f9813545686c25b0b5dff78a2d2915b9a47a02664f36608b32a9604bf636b1e1cadb5c02a73fc6dd2e40245bb7b0d7446187bb28b61844008b38266d784433b6a53d6c47cf22545f4156762688c0e1d19690ef20ad9f0fac0c8bbee21fb8a81547eb04acc926e248262be176bbaf5c83229cd99d1ab5260e5217ad3c77aa509bba0385c8dea71f6f39abf48235207205b2315ca057d0b9595b6fc832") geteuid() getresuid(&(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0)) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) getegid() syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x6c, 0x10, &(0x7f0000000040), 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000540)={0xd0003}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000007c0)={0x10, 0x0, 0x2}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:53:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5500, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:53:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807400000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 866.608573] FAT-fs (loop5): bogus number of reserved sectors [ 866.616996] EXT4-fs (loop2): inodes count not valid: 29824 vs 128 [ 866.654541] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 866.685070] FAT-fs (loop5): Can't find a valid FAT filesystem [ 866.686517] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:53:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9dce, 0x141000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/136) sendto$inet6(r0, &(0x7f0000000180)="0401000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843f56590080053c0e385472da7222a2bb42f2dbd94c3b50035290f118d0000f55d462600001b0000000000000000000000aeb462644a4bae135664", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005}, 0x1c) 06:53:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800004080002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 866.701260] EXT4-fs (loop0): group descriptors corrupted! 06:54:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x100000, 0x105004, 0xbcdd, 0x800, 0x6}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x28, 0x2, @thr={&(0x7f0000000200)="b50c39b15da365b2a5d0b1069da3be69d84c1cd6866ac6ed833cdce9af5e9d2960ee192d51a6971e8587b4a401d32c550c8dd86576449c2afd47c4fabe41d3af719b73e06b40488e83f1d6b9b8618880d49c1c4448c46297f94b7892c199673220b1c53fb98126c96efe135bb367cc2d139453dd352776dd8509ee4c4f68d52cf8cf3f826c18a54df5c92e5857bb9f81857b286e387da46e11608a7f347090f5304d0e03f749378ded95b22da00755c7db56f39ab47e740b9d07015d9c9789e85b8873388816a562", &(0x7f0000000300)="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"}}, &(0x7f0000000100)) capset(&(0x7f0000000180)={0x20080522, r1}, &(0x7f00000001c0)) 06:54:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4c00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 866.821587] FAT-fs (loop5): Unrecognized mount option "²i¡-´¥ÆëñÍ•T¾º5 [ 866.821587] 9â3 ?Cå0|š í¹SFãôZ;AS.Ë-G3~+ð÷ùÞ1\­'ÒðèKëÚ£&¦{ÈÀëÌšØ2~¢ û7úº" or missing value [ 866.855185] EXT4-fs (loop2): inodes count not valid: 134480000 vs 128 06:54:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:00 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1, 0x0) fcntl$notify(r0, 0x402, 0x80000001) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x100000001, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2cd06e521d000800626fa9038cf5c39f753e79fa79683385c081482717ef8ff02a6df582b256d4633cbc5c531a1727798403ce5288908ee36f26cc803b9cda8b02f41844b0999c22e8f2d1f8d6181e93870859e25fb5ef235f9bac96b4a41a8408c293c9b5d3cef457ffeec730771a0809679d894b4a94ca7c710b309817fc7c4e833f0b3abc50b714c14a2941df209fd8c5e1bc7cb645c39ce363a7a4e830276dfce35bf71bd6d61dfce765bffaac370ae02602f1b1e7b980e90521a40fc22b85775b6168c11da5547cdc57f2ae4d3318f427d596200fc2de7cd09b8e0c68425dadc6842c9693173f2c9b7fdd2314c127dad30a378f72", @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r3, 0x80000, r0}) getcwd(&(0x7f0000000240)=""/99, 0x63) [ 867.035062] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 867.077676] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 867.107596] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 867.141893] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 867.155318] EXT4-fs (loop0): group descriptors corrupted! [ 867.182817] EXT4-fs (loop2): group descriptors corrupted! [ 867.258881] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 867.299723] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 867.350224] EXT4-fs (loop2): group descriptors corrupted! 06:54:00 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x200000000000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:00 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$ceph(&(0x7f0000000380)='ceph\x00', &(0x7f0000000700)='./file0\x00', 0x6, 0x4, &(0x7f0000000ac0)=[{&(0x7f0000000740)="9f193980c16006661641e511dc187d8240267622dd58abee1c749752ce8abb2b5874711d7400956e00294607354473d20e510305bc0e1fce6ec70f4be873742084586dff43adbf8e241446b1bff2b6b11ae0b232d280353c9776446b7b5acdb5990d3c778a178fe3e273fc2930cfce9862b76066d724a91c1e89bfd33332d50f3eaa377c13a2f6895cef7d6fe0e25c883153c4dc89d7da02", 0x98, 0xffff}, {&(0x7f0000000800)="871dc5ab93f08e572e7d38d4eaf72a2a332483885325a9648b2e3d33a0132f1710206d25a5fe2a00afd1938c9f4e0d67903fe4679514b496451c6210cc3d37c77e2e97f607a7a2dcc779fb40195dfc425bf0884397688d6e4a3688bae838b28e9e444f59da1af03b92b26304c52d63d19d006da66d939338f9bf84aa81145d40db47a77b3e0a76ec67858764817f0e9ebae3356ec4262a50017e003f2c53510ec7daffc2ea", 0xa5, 0x2}, {&(0x7f0000000a00)="5788ff1c69db2340b8b594d70f73a63b9c49aba8cfc6b60e2cf9c7b559173c803758e319b288da62e281e6136affe82a98465016331ea2d5f5a291296b2a4989558767d0127d4354c068e991b2adc5b2fa23df1f511d21ed832edb0b98b5be66144fb94febe158bf068bdb22f1284d428f63aef0496391106bee3ed6295e743f8169ed7bfe66095fcaec2d17078f96fae4c7aab0fcdbef3506b5e30d6f08c9376329882b8f5b8418", 0xa8, 0x6}, {&(0x7f0000000900)="78044df967fa8fa93edb6507105e10f24eb9a95d", 0x14, 0x7ff}], 0x8000, &(0x7f0000000b40)='/dev/fuse\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)=ANY=[@ANYBLOB='?\x00=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',max_read=0x0000000000000e86,audit,subj_role=blksize,smackfstransmute=system.posix_acl_default\x00,subj_user=system.posix_acl_default\x00,\x00']) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 06:54:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:54:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800004020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x7400, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0x1}, {0xe}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2001, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) [ 867.626397] EXT4-fs (loop2): inodes count not valid: 33816704 vs 128 [ 867.654552] FAT-fs (loop5): bogus number of reserved sectors 06:54:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0x1}, {0xe}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2001, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) [ 867.690077] FAT-fs (loop5): Can't find a valid FAT filesystem [ 867.720706] EXT4-fs (loop2): inodes count not valid: 33816704 vs 128 [ 867.730176] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000102000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 867.777983] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 867.795813] EXT4-fs (loop0): group descriptors corrupted! [ 867.831399] ceph: device name is missing path (no : separator in /dev/loop3) 06:54:01 executing program 4: fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"7465616d30001000", 0xffffffffffbfdffc}) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000001c0)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000006c0)="489355f68d701dfc62ea41b334c8674b42f86db36fdcaf632ead4f12ca6852d5831add1f8c195672acf7822d37a39364484a9cc902b2d13dc8306205bba772c356b8f1ae47d07c1ec1abf5d893a0a15e834ffda6aed58affde074a48d8ba4a2b6b4792d77f309164", 0x68}]) [ 867.885770] FAT-fs (loop5): bogus number of reserved sectors [ 867.902805] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5d00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0xfffffffffffffffc, 0x2) [ 867.988149] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 868.040076] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 868.056835] device team0 entered promiscuous mode [ 868.063594] device team_slave_0 entered promiscuous mode [ 868.068214] EXT4-fs (loop2): group descriptors corrupted! [ 868.071064] device team_slave_1 entered promiscuous mode [ 868.147002] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 868.169700] FAT-fs (loop5): bogus number of reserved sectors [ 868.194632] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 868.205801] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 868.219983] FAT-fs (loop5): Can't find a valid FAT filesystem [ 868.243058] EXT4-fs (loop0): group descriptors corrupted! [ 868.265998] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 868.276007] EXT4-fs (loop2): group descriptors corrupted! [ 868.328894] FAT-fs (loop5): bogus number of reserved sectors 06:54:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5400, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 868.389573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 868.745185] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 868.772298] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 868.837448] EXT4-fs (loop0): group descriptors corrupted! 06:54:02 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xfeffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:54:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800700000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:02 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) fstat(r1, &(0x7f0000000740)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) sendmsg$can_raw(r4, &(0x7f0000000700)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000180)=@can={{0x3, 0x2, 0x0, 0xff}, 0x8, 0x3, 0x0, 0x0, "ea9c84461ecbd6bc"}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x1) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:02 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x200000000000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 869.134764] FAT-fs (loop5): bogus number of reserved sectors 06:54:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6000, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 869.184222] FAT-fs (loop5): Can't find a valid FAT filesystem [ 869.207707] EXT4-fs (loop2): inodes count not valid: 1920 vs 128 [ 869.274445] FAT-fs (loop5): bogus number of reserved sectors [ 869.299212] EXT4-fs (loop2): inodes count not valid: 1920 vs 128 [ 869.312473] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0/file0\x00', 0x480, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:54:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800410000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 869.453342] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 869.470838] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 869.499151] EXT4-fs (loop2): inodes count not valid: 1049728 vs 128 [ 869.513819] EXT4-fs (loop0): group descriptors corrupted! [ 869.524180] FAT-fs (loop5): bogus number of reserved sectors [ 869.530656] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x445, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 869.645118] EXT4-fs (loop2): inodes count not valid: 1049728 vs 128 [ 869.653852] FAT-fs (loop5): bogus number of reserved sectors 06:54:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f4ffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 869.689328] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:02 executing program 5: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000000000141042, 0x2) sysfs$2(0x2, 0xf6, &(0x7f0000000280)=""/8) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x80000001, 0xce, 0x8000, 0xffffffff, 0x8, 0x0, 0x82a8, 0x10000, r2}, &(0x7f0000000140)=0x20) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) name_to_handle_at(r1, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480), 0x1000) [ 869.877753] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 869.898176] EXT4-fs (loop2): inodes count not valid: 4294964352 vs 128 [ 869.913555] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000006c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 869.938453] FAT-fs (loop5): bogus number of reserved sectors [ 869.946837] EXT4-fs (loop0): group descriptors corrupted! [ 869.966464] FAT-fs (loop5): Can't find a valid FAT filesystem [ 870.100398] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.121482] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.137383] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 870.153397] EXT4-fs (loop0): group descriptors corrupted! [ 870.165390] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:03 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "1f1a591c1028c66651af3ab6ba870dc895fd92a71491a898b37b79ab5554491d95766f79566cf9fd75d864c710097936205633e8c88ccf1048540618094e6ce58d3608ff6f2f772c8c7d17fd6385ca933e9c449261e9c16dca8388d54b126eb4b4044b9684d9e1f3c83093fddee991b19883b817f65d29a6da68fab1796a1b6afdf055018d21c3bd0fe759d0849fbb14e6ee7a53f3cf33c84d563df64514b8f81834e489f35ac1c619c4900917da57c49541cbd1d3165f661ac66de21930077dc1d410674749026b3bc03ec20022a1828e59b16280ef781d7c1afac5df1944d8d5225f6a46fc93759b615278a6a8269c717f9e090214540d8588911b9bea741f"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@generic={0x3, "34e7f8abd7525c6ebcbfa349daa55c64c5a0e34672091665e2e6fa91cc1a6517f88275583282922a0e4a817a6e59bab7e03952fd592180c20c9a1c0c1716cf760bf24d88a56cb2a583dccf5629ee1a47e71bef11333fcbdb4ad99fd5ff40e7c96a4aefa5fdf6b052ef63be19700b4bdf462eb19f0eb8b4ce8e16fa36e6d9"}, 0xffffff4a, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0xffffffb8}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7) sendto$inet(r0, &(0x7f0000000580)='U', 0x1, 0x1, &(0x7f00000000c0), 0x10) close(r0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xc, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0xc) 06:54:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:54:03 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xfeffff3f}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 870.199506] EXT4-fs (loop2): group descriptors corrupted! 06:54:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800c00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 870.340851] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.372007] FAT-fs (loop5): bogus number of reserved sectors [ 870.387885] FAT-fs (loop5): Can't find a valid FAT filesystem [ 870.395574] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 870.409477] EXT4-fs (loop0): group descriptors corrupted! [ 870.418190] EXT4-fs (loop2): inodes count not valid: 3200 vs 128 06:54:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000004002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 870.482023] FAT-fs (loop5): bogus number of reserved sectors [ 870.502442] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)={{0xffffff93, 0xffffff80}}, 0xff8f) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x40) write$binfmt_aout(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r3, 0x0, 0x4) [ 870.586401] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.601738] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 870.611888] EXT4-fs (loop0): group descriptors corrupted! 06:54:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x2628, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 870.698375] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.711326] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 870.722931] EXT4-fs (loop2): group descriptors corrupted! 06:54:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000004c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 870.873530] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.891406] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 870.905722] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 870.916079] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 870.925581] EXT4-fs (loop0): group descriptors corrupted! [ 870.925958] EXT4-fs (loop2): group descriptors corrupted! [ 870.964289] FAT-fs (loop5): bogus number of reserved sectors [ 870.986720] FAT-fs (loop5): Can't find a valid FAT filesystem [ 871.006889] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 871.039615] FAT-fs (loop5): bogus number of reserved sectors [ 871.063177] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3400, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x140) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @remote}, 0x8) setsockopt$inet_mreqsrc(r2, 0x88, 0x65, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) close(r2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x7, 0x2, 0x6, 0x20, 0x2, [{0x0, 0x0, 0x7, 0x0, 0x0, 0x20a}, {0x1, 0x401, 0x0, 0x0, 0x0, 0x2000}]}) dup3(0xffffffffffffffff, r1, 0x0) [ 871.099346] FAT-fs (loop5): Can't find a valid FAT filesystem [ 871.129785] EXT4-fs (loop2): group descriptors corrupted! 06:54:04 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x503800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200000, 0x4) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643de39b5066c44ef135fdd94e0745f163613ff984f38530584cb078f2df86e82e7b61ba15f6cf39143ee5fcca5b29699d358c4a1b97c6e7f5ec1511ecdfbc473882dcbaf1a1140da4e4715d0eda7898631e20c0901e8e82eca25bf3f1b3dbc5fc4f64bfd4d4e252c2792a76434bfe2f5e2f89deceb8669ab3c1f600b961bb1b417f88b8025f81bbc5307a199e", @ANYRESDEC=0x0, @ANYBLOB="022ae4247b65b75cf000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xffffffffffffff9d) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0)=0x6, 0x4) 06:54:04 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000080f102000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:04 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xfffffffe}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:04 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2000) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="05c5d15f2c75f1271111d7dbc3870643cee96f0bbee16f090e25015a8bc8e4f0b5e0b3a3f9c693492a5e5b312430b398b3a2f110f6635f5426c2ecca893f921ae944f72b90e70a13fa0b72db535bb8d404f77e943f7cf2aadb8559651465d25fbbdbca9a7153edcc6e5275c2b378445d49ca2fbb004036aee96c2c10fd495582391dad90ad8e1fc924424c7a082abf082bee392f6eba6e844487a0519dd6592a5493eb8b148312c55b84d973afc23d74d8ec08132656c5bb882da86990d82bf9dabfbf58fb0b8350a777a8f0e9", @ANYRESOCT=r0, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESOCT=0x0]], 0x8) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r2, 0x0, 0x4) 06:54:04 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, 0x7ff000000000, 0x0, 0xff, 0x6, 0x9, 0x63ca, 0xe4bd}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) write$FUSE_OPEN(r1, &(0x7f0000000180)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x20) [ 871.376655] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 871.432143] FAT-fs (loop5): bogus number of reserved sectors [ 871.443467] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 871.457118] EXT4-fs (loop2): inodes count not valid: 2147483776 vs 128 [ 871.475457] FAT-fs (loop5): Can't find a valid FAT filesystem [ 871.482977] EXT4-fs (loop0): group descriptors corrupted! [ 871.537083] EXT4-fs (loop2): inodes count not valid: 2147483776 vs 128 06:54:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x4000, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 871.586749] FAT-fs (loop5): Unrecognized mount option "ÅÑ_" or missing value 06:54:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800fff000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="cd7d7619e7fa150087bcf8ba031d31151fe9005ddbd481b0af07c9840a3875b4c1b286b8b91785c674bc3241d229f06c2f553c94a3a74b34b86b0e5583d99bf080ed90cf769cc72dd49a9bdadb928f1fcabef8f578a8fe92d6a9c479951cfd41e86bc0c65b926e5bb6d8c2edd7e7200204d6fb3ee2c24c190823ea3ba6dab62ea547bc2a15d3be4c7b37d5f813068ad317f10a4c82b6e719a96e4b0a06a40da055b157c7bbf7cf6567c9e8f4d8364cbda10c603c77f90c4844422f205e6a31c993d21038c4f25c91aa2bcaf0d9e513befdd8452ff52d"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000280)=0xdf, 0x4) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffd, 0x7f, 0xffff}, 0x2}, 0x20, 0x1, 0x0) 06:54:04 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000180)='.\x00', &(0x7f0000000780)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0xfffffffffffffe1f) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) fcntl$getown(r0, 0x9) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000540)='./file0/file0\x00', r3}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 871.756102] EXT4-fs (loop2): inodes count not valid: 16715648 vs 128 [ 871.780518] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 871.824069] FAT-fs (loop5): bogus number of reserved sectors [ 871.842403] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 871.858026] FAT-fs (loop5): Can't find a valid FAT filesystem [ 871.876338] EXT4-fs (loop2): inodes count not valid: 16715648 vs 128 [ 871.886563] EXT4-fs (loop0): group descriptors corrupted! 06:54:05 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) read$FUSE(r1, &(0x7f0000002000), 0x1000) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800500000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3500, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 871.984352] FAT-fs (loop5): bogus number of reserved sectors [ 872.019976] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:05 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1d40) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x10) [ 872.198660] EXT4-fs (loop2): inodes count not valid: 1408 vs 128 [ 872.207604] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 872.248605] FAT-fs (loop5): bogus number of reserved sectors [ 872.259367] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 872.290157] EXT4-fs (loop2): inodes count not valid: 1408 vs 128 [ 872.314672] FAT-fs (loop5): Can't find a valid FAT filesystem [ 872.320899] EXT4-fs (loop0): group descriptors corrupted! 06:54:05 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffffffff00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ebffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 872.467510] FAT-fs (loop5): bogus number of reserved sectors 06:54:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x3f00, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 872.512054] EXT4-fs (loop2): inodes count not valid: 4294962048 vs 128 [ 872.524243] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ffff030002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:05 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x20) write$binfmt_aout(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x52ab5bf2, 0x3f, 0x1, 0x1000, 0x400}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0x3}, 0x8) lseek(r2, 0x0, 0x4) [ 872.665774] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 872.685750] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 872.697546] EXT4-fs (loop0): group descriptors corrupted! 06:54:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="004000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 872.733917] EXT4-fs (loop2): inodes count not valid: 67108736 vs 128 06:54:06 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200000, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x44, &(0x7f0000002000)=""/4096, &(0x7f0000000700)=0x1000) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) splice(r1, &(0x7f00000000c0), r0, &(0x7f0000000180), 0x101, 0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 872.806389] FAT-fs (loop5): bogus number of reserved sectors [ 872.815368] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800040000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 872.867452] EXT4-fs (loop0): inodes count not valid: 16384 vs 128 [ 872.950372] EXT4-fs (loop0): inodes count not valid: 16384 vs 128 [ 872.970488] FAT-fs (loop5): bogus number of reserved sectors [ 872.978484] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="02"], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) [ 873.040769] EXT4-fs (loop2): inodes count not valid: 4194432 vs 128 06:54:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:06 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800005000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 873.148624] FAT-fs (loop5): bogus number of reserved sectors [ 873.163834] FAT-fs (loop5): Can't find a valid FAT filesystem [ 873.207150] EXT4-fs (loop0): inodes count not valid: 96 vs 128 [ 873.250252] FAT-fs (loop5): bogus number of reserved sectors [ 873.277096] EXT4-fs (loop2): inodes count not valid: 327808 vs 128 [ 873.282944] FAT-fs (loop5): Can't find a valid FAT filesystem 06:54:06 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x8cffffff00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="760000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x11) fchdir(r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e24, 0x1, @ipv4={[], [], @local}, 0x3}}, 0x9e3, 0x17, 0xffffffff, "af7e7015bcf12675b358c3813b4c1d1cfd40463fb276eb154a49398f99be52fb991b75b37a66d222ccd3c5dfdf8005055a88950ce10ea975d88757c6fd0118d91e3b218f4b00e4f848e062ca29d8c1d7"}, 0xd8) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) 06:54:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80025b000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 873.545396] EXT4-fs (loop2): inodes count not valid: 5964416 vs 128 [ 873.553417] EXT4-fs (loop0): inodes count not valid: 118 vs 128 06:54:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000fc000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="100000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 873.599214] FAT-fs (loop5): bogus number of reserved sectors [ 873.635339] FAT-fs (loop5): Can't find a valid FAT filesystem [ 873.703761] EXT4-fs (loop0): inodes count not valid: 16 vs 128 [ 873.732461] FAT-fs (loop5): Unrecognized mount option " [ 873.732461] " or missing value [ 873.753992] EXT4-fs (loop2): inodes count not valid: 16515200 vs 128 [ 873.781893] EXT4-fs (loop0): inodes count not valid: 16 vs 128 06:54:07 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x6, 0x8000, 0x3, 0x2}) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030306538362c6175018000007375626a5f726f68653d626c6b73697a652c736d61636b667374726160736d7574653d73797374656d2e706f7369785f61636c5f646566617d6c74002c73757365723d73797374656d2e41128c3e21b4c5136c5f64656661756c74002c0000000000"]) 06:54:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80007a000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00'], 0x1) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "a40150a0f99e4a92a3348c66400f24f6"}, 0x11, 0x0) lseek(r1, 0x0, 0x4) r2 = getuid() r3 = getgid() mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x2010004, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x980}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}]}}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/162) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x6e, 0x7d}) 06:54:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000017802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 873.921674] EXT4-fs (loop0): inodes count not valid: 16777344 vs 128 [ 873.938435] EXT4-fs (loop2): inodes count not valid: 7995520 vs 128 06:54:07 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r4, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 06:54:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80006c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 873.981735] EXT4-fs (loop0): inodes count not valid: 16777344 vs 128 [ 873.999042] FAT-fs (loop5): bogus number of reserved sectors [ 874.021770] FAT-fs (loop5): Can't find a valid FAT filesystem [ 874.159231] EXT4-fs (loop2): inodes count not valid: 7078016 vs 128 [ 874.200501] FAT-fs (loop5): Unrecognized mount option "fd=0x0000000000000005" or missing value 06:54:07 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xebffffff}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800060000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffff502000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:07 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) setpriority(0x2, r0, 0x200000000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000005c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000600)="6e7c61000091c872ba8e5ffa1d09292ab5472011b9e93b") preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) r3 = socket$inet6(0xa, 0xa, 0x3) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000040)=""/83, &(0x7f00000000c0)=0x53) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = socket$inet6(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x5, 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'syz_tun\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}) r7 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) setgid(r11) bind$packet(r7, &(0x7f0000000100)={0x11, 0x1, r8}, 0x14) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000200)={@multicast2, @local}, &(0x7f0000000300)=0xc) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa1900451a00280000000000009078e0000002e000100200000000d5daa894fc4451c6fc15454791378bfbfaa8eab4052c1d59b25074759d76a971902354c43f55b6746af45727b52ce37ffd4e77", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000240)) listen(r3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x111081, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000500)={'gretap0\x00', 0x8}) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000004c0)={@mcast1, r8}, 0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000340)=0x4) [ 874.536613] EXT4-fs (loop0): inodes count not valid: 6291584 vs 128 [ 874.550877] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 874.599863] EXT4-fs (loop0): inodes count not valid: 6291584 vs 128 [ 874.611874] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 06:54:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffff602000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:08 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) creat(&(0x7f0000000180)='./file0\x00', 0xa) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x40f3}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000700)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:08 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) preadv(r3, &(0x7f0000001ac0)=[{&(0x7f00000006c0)=""/21, 0x15}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/138, 0x8a}], 0x5, 0x0) finit_module(r1, &(0x7f00000005c0)='mime_typeInodev)vboxnet1nodev#nodev\\vmnet1/\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x1, 0x1, 0x100000000, 0x4, 0x7}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x38, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x38}}, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000003c0)={0x531a, 0x7, 0x3ff, 0x43}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100)={0x1000000000000002}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}}) prctl$intptr(0x29, 0x2) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) semget$private(0x0, 0x0, 0x40) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1f}, &(0x7f0000000200)={r6}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 874.830112] EXT4-fs (loop0): inodes count not valid: 26752 vs 128 [ 874.844853] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 874.898166] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 874.937079] EXT4-fs (loop0): inodes count not valid: 26752 vs 128 06:54:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80003f000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:08 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="808cffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 875.082870] EXT4-fs (loop2): inodes count not valid: 4128896 vs 128 [ 875.186352] EXT4-fs (loop0): inodes count not valid: 4294937728 vs 128 [ 875.207446] EXT4-fs (loop2): inodes count not valid: 4128896 vs 128 06:54:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000017902000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 875.339553] EXT4-fs (loop0): inodes count not valid: 16777344 vs 128 06:54:08 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffffffeb}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800300000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807fffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000fff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 875.563053] EXT4-fs (loop0): inodes count not valid: 4294934400 vs 128 [ 875.588217] EXT4-fs (loop2): inodes count not valid: 896 vs 128 06:54:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fbffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 875.737396] EXT4-fs (loop0): inodes count not valid: 251658368 vs 128 [ 875.770678] EXT4-fs (loop2): inodes count not valid: 4294966144 vs 128 [ 875.807088] EXT4-fs (loop0): inodes count not valid: 251658368 vs 128 [ 875.819630] EXT4-fs (loop2): inodes count not valid: 4294966144 vs 128 06:54:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000007402000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:09 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303034303030302c757365725f69643da044712f0e1f0bf91f51b14839cec5cbed5dca54d619b94b67c9134efa14f5e5cb5195db100fe6b8e6fe0993fc6f7c5568a28edee8a57eaa5d86fadda5f94757538b776429e70f9e4b76de4d36b51246a54eeee7de83840e2fa30b078dee5a55690870f1973ba5a3636cfacac4a858", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() r3 = dup(r0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000700)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r4 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000000c0)={{0x8, 0x4}, 0x1}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:09 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 875.975764] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 875.993181] EXT4-fs (loop5): inodes count not valid: 26752 vs 128 06:54:09 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x0, 0x800000000d, &(0x7f00001c9fff), 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) socketpair(0x0, 0x802, 0xc553, &(0x7f0000000040)) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) [ 876.049892] EXT4-fs (loop2): inodes count not valid: 26752 vs 128 [ 876.068371] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 876.082844] EXT4-fs (loop0): group descriptors corrupted! 06:54:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 876.289243] EXT4-fs (loop2): inodes count not valid: 2176 vs 128 [ 876.312804] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 876.344236] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 876.356190] EXT4-fs (loop2): inodes count not valid: 2176 vs 128 [ 876.381629] EXT4-fs (loop0): group descriptors corrupted! 06:54:09 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x3ffffffe}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:09 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:09 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000700)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000180)=[{}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="e200000027ac3d2a674daae977e9646de9e9ed6a3df71ccd6a28cf102b14a9437e6307ac989636d195e786f095911955b12f269bb6e27381b1e36022182293d3f8517d8d6cb3fe33ec81728ae86ecf828f8b042ad9b6b132d34e7abb7480584a228278bf76618865d843509c27fb6dd078a43add0a4b13ed89560d3c62e8bdc88a861d041b25a4c4e6353d01c28681ed0a36aaab10f2d65a00864f101f0df8ff93a7f86557807f9f0bb1000d1e416e14811846c49115a3fb7e056ead4d267a470e2871fc8b20e26e1e2e2e0000000000000000000000000000"], &(0x7f0000000840)=0xea) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000c80)={r4, @in={{0x2, 0x4e20, @rand_addr=0x8}}, [0x4, 0x9, 0x400, 0x5, 0xa2, 0x21, 0x10001, 0x6, 0x3, 0x3, 0x3, 0x40, 0x200, 0x1, 0x800]}, &(0x7f0000000880)=0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r5 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030306538362c61756469742c7375626a5f726f6c653d626c6b73697a652c736d61636b66737472616e736d7574653d73797374656d2e706f7369785f61636c5f64656661756c74002c7375626a5f757365723df3797374656d2e706f7369785f61636c5f64656661756c74002c00"]) 06:54:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000004802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800003000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000280)={0x50, 0x7d, 0x1, {{0x0, 0x3b, 0x3bdb92b4, 0xb8, {0x2c, 0x3, 0x2}, 0x8210000, 0x2, 0x5f75, 0xc1, 0x0, "", 0x8, 'keyring$'}, 0x0, "", r1, r2, r3}}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000015c0)={@random="ed7d87268571", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x2c, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 876.640848] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 876.650916] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 876.662894] EXT4-fs (loop2): group descriptors corrupted! 06:54:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000502000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 876.700113] EXT4-fs (loop0): inodes count not valid: 196736 vs 128 06:54:09 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00002d5000/0x400000)=nil, 0x400000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000333000/0x2000)=nil, 0x2000}}) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="8819872d75cb2f3fea421be9f8f9f1c3025e14ba4417cea8cb4ebce9f81d8363d286357837615005873a387d9a9257f0692e84c2f6125f3a5f9c25a55a06fd1d2138f4221d361e5c8f81125113340592d6e3ffa7fd15adb01d9ff94835deac358620fe1d20608ab91f569fd7f36d1e8165f018dadce135171cfae4d2acc4d01e925da28b153da61b0befcd96e2e6637c2d47ee8772044b1f07fa36972b4769e035ff4d3b140cfc150e7d03025a566aa99520c4258956efb5fc067cbe510c5b51e1e61fd9eaeb03e784d5a68c03da368b", 0xd0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r1) [ 876.773362] EXT4-fs (loop0): inodes count not valid: 196736 vs 128 06:54:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800168000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket(0x1000000000000010, 0x80802, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfffffffffffffe92, 0x1, 0xffffffff, "2c136e010400009f213b728e708400", "5743adb113928413a1570179e219f475ff99791be390aeeac08d040f1651e767bdfcf267a7f73612a12d7749051dddc33ca5904134721a406449ce2bc24586bad8ff6f660edb583191c21015e1ae018d63c1f89ea7cae83e2c7d5a302d800635744af8d3d153ebf95205e590dbe3e2f37b59a88c104e040f0d0cfef5b1863cdd5ca2ef671be03af4a2180788332d2094214545e3cd39dae48b9258e236c0ed826dfbe245124395ee9300054c4f52adad"}, 0xc5, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="c4a288d2d83653cbbfb1e08cd6ed", 0xe, 0xfffffffffffffff9) keyctl$describe(0x6, r4, &(0x7f0000000140)=""/254, 0xfe) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) arch_prctl(0x2002, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={'vlan0\x00', {0x2, 0x4e22, @broadcast}}) lremovexattr(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)=@random={'osx.', '\\/\x00'}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) sendmsg$kcm(r2, &(0x7f0000001d00)={&(0x7f00000005c0)=@xdp={0x2c, 0x6, r5, 0x15}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000300)="1b8f883ddc9ffdae28267da71f4beb2551c21810bdd0a7d542d6029c4dd187fa47de2a37b09f1d133f6d", 0x2a}, {&(0x7f0000001640)="6e4433a88fecc0bc3c5b6797a070381f322d448a22d1c2da5c6f424c39f552da648aa2e9f8ce547622527119a686464598dc733347e1373ca7f637c561700552c72fb2034d5b0f9a848f920a1d7e15b95c479c0fba5f750c87f6f891d82724ac648255d66adb3cac4c8f61ad8c4b0c76c3f72e3373619164629d20939952203a67a6cf4723c13edcc3210520db578ee4f1c146e6d8120b67e40937427d6bcfa67080b0dea640524252507ace", 0xac}, {&(0x7f0000002000)="3ecb3349fd104014e966ec46a3d3397f4a9a10c603c35e4052aba0c587261118d35339c731db50bb3f41ab50aaad1cb4ca93e9a426ac5241cc5cbd94d5141bd306557962939c6be81d47844830af3b73aa16961185b30be6aaeb7846428b2ff6ab14eee13b5bd720e0858b2722ee82c1fe8af30111e7fb80c440098e3a0c64c06b6f6a99baf8ed6cd678797f472e9c16f04652b2ef24accc39fc20f4cda680082dd40a7fb9e8ee60d0bba8604daa3ae8b7503d539ec7da9431e270fe9f1d8626b8758fab5053de2ea138b4522a8efcb895e42122f7168a101867e9bd14b5a635b4b29c512b6ecca12907d2eadab2dbb64cd91930806df9013bf2822f21bf0db7f3d92f8e61e0beb53221fe6a8d2b49a6179db75d9c80249425b29d4acffa0817695104881641b61f7a13c3de8c49647cf64bcf0a1eb8551237682c996f759c11c0d21cf7fc1664bb2e65975c52b9e0902263f49435be28d58da6a443441f32c3ae1bab0824c304788177ea0cae7adbb05308b72f9280cb289d7ab53487325fb94fbab40e919a24d81fc1ef31b5b7b3830c5694bc5bd208ab3d7e4ebb5549cbe9e777409a91195c5d6b560f5f6232302d777108b20fa5a8aa9c2b223f00bde25a1ae595c7757089b5f0a024bd37946f608b431779a41fa85551f3a9cdf8b0d441517258546ad84ec7b80e9eaf1e84bbf9fde4659f9e867d6626b999dd0859c89412947528eae0e2068931eb140848e3b91b752f05f83c1d6b02c183abf7d937c06a0ecbebd0fd1288f6c2d231e3211b437e10214cacd78092e29c18e4b9e4d8486db791b5e331c3bdf640a06e16db4442814182fa9e3d69a70d7ee065faf9d11e5c55acf1a575d3123b79ed48167d9f7c5dbfe2aecc83035724223c7232c093ae048dd0e80ae33b0a6a49cb5fe2a4e72a4c395edbbbe3dbf034dd55c446d08bbad986b82859c6bb26f3c2c67e6b91bd75ff7d88c54e9c000748e49d52eb9129db426552430ee6c689302853452e827fe1e40de6a6ae71f04df5fa2f5ec99c55dad0f6dcd271928c7fcdca72f0fc94c7c587a424477916a487c3d8036c559f8de8cd07641e878de74d21cf19e78743417fe54fe714efc57414e9fa2f8a318e6f9c2fab217f59d76bbfa3b613ad3af391cda48b31c2025a0e2af0e080e6e68a57d0f61b614cbb7878aa99b586f396959a252287e71123dc33feb0796fc22d2492381cb0cfe4db5cf29cc90ce96d91439fe8bc13b24972c909f8c4d9c3bc421f9509ce6248f8ef82a37e6ae801c9bc973c89f9d497eea060f5727396e23ad57eb5a7fd69315af2209e0956cc3aa87e2661ad1ece1aeee7819b48cc97050b9e9d546b91ab86ad895315827e33f04bccc6427de4f995e5c3d90f6304e55dda788d3cce9b991c7741d24a100fe52be5167d20613165b338a47a3dc9fd1c86c83ac77eae3dc83eb661d67410ddd337659f85cd045ad5ba73c330388379440f1aa46a9d5c647a175d85797a65b50db7671fa1eefbe04624c59f012cbcb24d840c5e0f35e23ffde09b9a5021c6398f909f6ba18355b45bbb00d338df9f6433928f4c5f2aadb998afd2f205e3bc309b8d770a11deaead4bb5c820f8c7f55d4cb8e046c80309f787ff8346845200bb960aa7de5d631319efaff4cf7014861a83ccbbad94e0aa408b8a7a1f641eecb21305f9151ac136e97f64cf985bc8ac88363234a14f45bd02cabfc063ba93d7c2b9df1c893d1ab22b735952318daa3aa5bba5230b6075460ab4e2a0c9fee479accf453f7f5fb88908f974d85b1cc37fed65a972b6a138f9e7ea8d0cfe5fa0308bc39bf15af73c7e2cc58e8c5261ddbcf47a2522f6c8610f6aad19c85a89ba68accc893d9c234b816a4b21c5cf76c7705fe46c8103757bbef1bc1896582b80fa86253e80a125d4bd8764445ab23fd7e59e3dfbe53ef88a515d1879428dba86006e7d1a1ad28ede0ffda1ad9f97661accb76026be067aad0d59cfcb0e9f8cb76bab71f9f2d4d896a895294902dd55af42e03b7cf131362e592f7b3c6a6d481bae3ba176635048ba0231289dad575363ce6622d5321da852dde6b8633f2b8bf791b871a4c478413801d1b41432896db358b08676223b1e46e815746b49d4d40c1522a68562ba48e96f1aa2a28200bf7157108f0a1abe3407b5f2395466f8fa26194b270d2898174e56c702d8748e9aa86dc891ce398fae63ce29b37318df68e35cefe4c6f2e938454509ff93dca269edbe4d09a701cbd9f2e61a86c262981986d6558bca83fe24d7ad24a4f5bd1095f47d170dee78471fd41185c51aa530264fb4b9d5a29a6b0cfde426178c3d73c53e00457d98bf8470ea438914fe321912cccfda6ec7455ff5758d537d956a10cc486ab82f7d580109bbd5a575c5e452ff1be9d171dae892b58be2b5ea7b0fa34ce77fe2cd31c3c27af5749ae1fa8fb33b10936af39ae044fb5600289c808438f28055de7152ea8c7c4b3089d0385bb7db6d6eeebb2d54809f3260d8c4683bbae95a2799ee6132f79af22afaa41dc2e71eac246a158920347f6bf0355608ecc1c0a6ae507e5caf77ded4502187c23b2f22716a27a7ad5877a9618e428305a4a68aa388179507d2525e7f50f9eb9f5cdb86e39a8e934927618362fae08e5e1d7e5b98743bfffd8024371ebe97b1b0f31db1c58041b2ff4870849e01d714526d060ee3442fdef89863cd1b679140e0e6c72d2deacccfbb35e3d0f2548eaad9cda8e0832bb347efcbbbdbb4664a6c13ed9690c6cf90f7b01e7dd6c6423aead077232ae5b926cd5619e01d06e9fb2f2d08ca294d56fdfce70351a089f315478092f6cd07c7f490b2a05bf108afcff4ab2011f05e2cc7d86327c32324e05ad2d316b0671e4eaa6bac5f8baef961db142ed683d59795c91051b17bb19c2453975275164aed12464048a6c8865d52a999963477b9525f20f442d4f0b0e0a50535ba4ba9e27a22f09dcae976be927602aeccda78b2a0c52e9df7c11a3ccd9af29c6ea01c4dddf32998ad085c6939553434f55717a574e49c49279698728de6c170263f8ec61e8e1110ec8ef7d352c8b44a2d32d6ea6bd228f5d1e1d1a8122567241d8350b5ec7bf474d0860ed5b70ddb510c71e72fb6d8b77ecaeef09289d80b3f2a24838b0ededc7e70f73e51e84c08548f009d72df9e8fc968c225dd012d01886ca0ce082992d495bc6c743ce41207147a9aa5c29ce235bcd61296d07f5c2d655ebbec595a175b453065317ef8ca561fb62515cb50efbf85533f141691ae4b5624d1226b547a63fad3132b712537054d2705b026dd5805e1218ca21e8786ee291ece26f80f30d072decf503be169763d917127165068de1df24a88a91f6a3a6be986c4d3d939b490cfee5c0d67c83e105f55bfc8714809b2b8e287c7596fac3c21b718be53c463f8f89f746cc3af6d83ac556100304635bf6864385862944cbaefd3bc7972836830c8244050f90c100781f809344f7a0e3d9b320a71d0989b3a6f8bcc80a3f2d8b4ffef250e502189bc3348d5490b5091dbc6e07cdd52c0615ac1960f80b60e7d8861cb904145936de26f34cdfbf3f6618fca9f3d669173bce0e2227a28ee5029248791ee4a37cac94052f44cb329eb0e0c64ad3cf8c033b52696d94ffb8577bd169f345d1b008cdd785feffb70c251764bfe25b4b5643a7f86e01dd2b8edd1e9b7827c7eabce567a9a492fbe8524d608349aa1f2751c3b3b495341d84565fbd48b7d7ef8820afa7e69426d5c5c69a24905414ba0f831ba609185759faddab88951598169e5190309427099706b1e73b8a5cce8505412c9e527cf5537db2220e400a8df23cacf6542189568855c3ea12060f2e3600deaeba87ea79d46e7287913bc45f79b43c704cc9192873041653f3bff4a9761b3f41291b0fbc20ef4d71d607e6abeb4cea6070b8e8c97817b53df044e693374a266adb88a65bfe9ba77e76b3216d975f5736dc5c952c9513101a5cef41378247722420af364d57f5a9106697f03a2ff2445c8874427344c2e9a154025d9c5125e4801144a192df8250397e733b7726299c76b4ef92085e06f9b228dbfca184cfe07fbbcd9553689199c801c389acb20eb40735af26f690d2935248028cb929589305651a33a64d8b0d6cc9c1d196dbcc52f37088796369b7d05e099aaddfc9ff06b082c28109791809ceee697741d2431bd89077699f76c8844013ed64a318842340ad12c9f593b5f96f231f04e4ef0c8d629fc08d36766b730312ccb9ecdbff5b37341ee48ab458406c837339fbf04256362963d055cc23e3a0cdcc8e2a2171763f2c1fa614910f3febc10cc72aa846dae77b439836ff4393486250764204a458d0fa734551f4af523d95acde338867598abff3d3b3a1e8baa22e23060808052e5a62348db37b5033d179da2f0690658f2b5e3837fe729eb1c6426b1d2f5d8f30d844c301c9aaecec0c5471551b86284c8d03b0ecda1e9b204ab8c80e6d6c3e01ef59af1cbbf6592a0f33a205c28ad95160ecfb19236d59b024d179a43ce222000afbde8a569ee894fee981c275ca76d47e6a27658cf1cb657a42380396793416cf9d25bb8713dd184198cbc5443b3923db3731399fbb5a502e0f8733bee47228236ba827d7314416fba82864d07b3d9f8bdb6b287b81664f8bf6d041cef1416ee488a66933d38e55f1e0c84a7056ce67ca60a5762e7a64f951e1c02afd3b86f5957f65cd7c9571cb247426aff0064114a5aa03abb8560af345ed9a56545ec7b872a5bfaff4a2ef5a80ba04cee144f2659f035afe05cb209e3416607d6640b6d05aa40494368a1a1d287973c8a48ea4b61d24d9ffa6eccaf748fb95b8e752f84c7d2c4a0e44dfc7ab96e2a9022e5fb08a9a63ac12518edffa7e11814e56f86f5972b59e8de8a5bd832e980cf0da568ea8c4fa8de6e85d889acddad6234745aae6803bff8ace1e8b93673ddbd4b5953d3b4c7eb42c4c59b73f50541574ee9cce4e98e56ae7872ac8c729ffd12e1f7b4775a8abd51b819f0192109656082ecf81fe225e5c64a1939b252de56e2224120d29ff5bf235dffc67ce69df557b62f48a1f04dd3aab19e473c42c70e6a51a09b8e99555fcac43d80874dde13e138bef517858b48e8e5010967776c927864696a4fdd1d686157c288690284d383ef052cb2181bea97f9f150b1c5f30ed9b15ad1bae4bae3c3b837a1d527f78ffc5dd58d775a0906a2be4463ef88ce5d9d9314eac830c61000db03d8a69d9b9e8a10a237e0afcdee16f9da1b2b174583087debc778ab7aafd8cf0875773d599b53c4e599756ed980c4791d54984ef4f3ff1a97f8237fa4128d999594ed64c3f3c4930f3a71c94eb8b7012a583c6630259e7ffb7fe3f2b83fe9e44d0dafd98a3a41e00418b426177363baa7a24007ba258cbc295a4005849b3d9667cf9057765f9049b5828dcb725077959bd04a9572594a9a69c2855564606ca66743491d3a3b4a5999c31ec453d7dd3dd87ef041cf6560e9eb98eed53b3ed0a1fb650226e471ae67798059976784fb9f8fa7e7870f097b895ceca85923734d7e9f41e6cfe1f6bdad69c92b11db16ba8d0f53541d69628efcc1e7d8d1fb43c2281ff3984e6273c2e2809072f38cc1104a0af881b13ee78d9f5fc991d0e47ccf72ace4fe6c7e4c596d8959cc23ebc4f24170a948ffd496269baf30fa48bc787a3245ccc927084f81754a1bbff54345f6da96104d5b8e5316a98f17e4170410decfef2aff1d7e440a0d06f1160e4ca01e7340254099595947e649eea503ce", 0x1000}, {&(0x7f0000001700)="92314e1db51c590117d8c343c57d481f7f2006033533abea9d893754b7b4153c300ec650d7caa834674eab14ac12d9df53f3b6e81a4c1c410d101da882a590f62ef1a0f9a72fe74de10a7a13ba0288e9daadb8e07dc793f0884b1f4f578ae2fa650c8d857d67c0abd1fddcf62ccd24ebc5dc83adde4c475e48f8628071a5daf70d97a033314a9b4df2d96c6419e328c432866b05e0dad82b4dcf6d905bee19d2d273fb0685c1d792cb12e1adbb7b76c1c35da9f17a58feb43f433e8706ae7c2ae346d0408ed0f3fc29268b034e5f36bf9634559784a5e39660134c86064420f9b33daee9fa1964b8e1", 0xe9}, {&(0x7f0000001800)="061a0ab8eb1a4145a187c2f6d47f9c91bd257026e9b8629935ad1e2c80be5c7e83936eff3e2b804210b537f0f93a5868565216deb36c84caf6f9c7ba250e53860d6eb540946c75f675754aa3b34a40635495f726ec02cc40225b2d205ac237341ce55f37986ef95a1e33ec11a72110ffaff798efb96b052e400d1149721617929fce1f7dcbb0a200dfc701296d5752405699748b2f0ef9bde828a6e02167bcb6584ee2b376fdd97098913486e6e0aea8a2", 0xb1}, {&(0x7f00000018c0)="2a34ac4f768f4251aba667d514578da87abafb0b10014b337f746c042008f91502a92c8b", 0x24}, {&(0x7f0000001900)="677e6a5519", 0x5}], 0x8, &(0x7f00000019c0)=[{0xc8, 0x111, 0x3, "e301f88647118755b32e83b70b46886326d206d948178e2bf234efecd187b9c3827240ab2ed68db69dea87c091fbf54b4fa1a28755b067e1cf32b8372f5b48cd5d7a0619f6fec6b3cc07528992912a820cb9309bad4c2cadef01c8131d0ca256d20a265797eb3ea46a9489f43b7f835194ca598d047309384c2c9b26996942760e00c6062afecff169e78bae77783403e96b65d57cf8161810c06e3a62ebf8aed3aa6ace47b50a508c91007acb87fc6977196cfe"}, {0x80, 0x110, 0x1ff, "b4f13e0f3f5be94411a516f7809f80df159160f369aa2ad35fd1e31529170a7fca9ccbf5be60f651f2b5083f7972d0ac1d305b6a98d244f4bff185570bd82f964e60e0ebc7be79b949241e6b95853d6bbf8e506512696fd6badb1e336492e372d632946262c761e9619e"}, {0xb8, 0x10d, 0xee01, "97501346dc02198faf348f8e29a936d2db4b27a0724608225871f4e87e55782dbd5ce8219fd72f75288b95594036e0ce46dfea9deac22d82c584c699bb2d72a1a42abfacd92b7bfe7657d1315b17b27499f3f0aec6d0d3b895c2356b7e499999fe0d1de92a9c64ae692e3e41d3bb2793d6ca84948a653329a51ebd2630783dfcf59fbc028775ef162ab0b4b87dc1944b5665ca4a2519703725c57628732c24ba21dd7f9e"}, {0x70, 0x10d, 0xea, "431a8dcad71155372853f2e0b35e958c80741ca358081f4173fa1a74839cc13247cf24ceea423f337e10b7b51c974415a12c2f47fd8e0427b9c4519f3cf807fcee9300ef886eaaf3d4351e7c9a6977b95409641b9af94a75f9db99f942674003"}, {0x40, 0x1ff, 0x6, "9fe5a7c76a715f59838cda1564d5d73c72ec6fc5670082708b6bd9aa1eb7d84e5e9c32884d6ef93914d989bb49"}, {0x58, 0x13a, 0x4, "15466c6b267149c6f974b8b1c81a556925a8e6f52c1c86f33d3c857548604dca157072bc2e8f3176e86edd81085440c5cb4da8a872d5807828e37ec7637ca15f33"}, {0x10, 0x184}], 0x318, 0x4000800}, 0x4000040) [ 876.852326] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 876.865510] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 876.881340] EXT4-fs (loop2): group descriptors corrupted! 06:54:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffffb02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 877.010081] FAULT_FLAG_ALLOW_RETRY missing 70 [ 877.017228] CPU: 1 PID: 11727 Comm: syz-executor5 Not tainted 4.19.0+ #89 [ 877.024183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.024244] Call Trace: [ 877.024277] dump_stack+0x244/0x39d [ 877.039837] ? dump_stack_print_info.cold.1+0x20/0x20 [ 877.045050] handle_userfault.cold.32+0x47/0x62 [ 877.049742] ? userfaultfd_ioctl+0x54a0/0x54a0 [ 877.049763] ? mark_held_locks+0x130/0x130 [ 877.049781] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 877.049795] ? futex_wait_setup+0x266/0x3e0 [ 877.049822] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 877.073117] ? userfaultfd_ctx_put+0x830/0x830 [ 877.077710] ? futex_wait+0x5b1/0xa50 [ 877.081532] ? print_usage_bug+0xc0/0xc0 [ 877.085611] ? print_usage_bug+0xc0/0xc0 [ 877.089694] ? print_usage_bug+0xc0/0xc0 [ 877.093772] ? zap_class+0x640/0x640 [ 877.097504] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 877.102615] ? futex_wake+0x304/0x760 [ 877.106444] ? find_held_lock+0x36/0x1c0 [ 877.110522] ? __handle_mm_fault+0x4bb0/0x5be0 [ 877.115111] ? lock_downgrade+0x900/0x900 [ 877.119266] ? kasan_check_read+0x11/0x20 [ 877.123413] ? do_raw_spin_unlock+0xa7/0x330 [ 877.127835] ? do_raw_spin_trylock+0x270/0x270 [ 877.132418] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 877.138056] __handle_mm_fault+0x4bbd/0x5be0 [ 877.142476] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 877.147325] ? zap_class+0x640/0x640 [ 877.151048] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 877.155979] ? kasan_check_read+0x11/0x20 [ 877.160128] ? rcu_softirq_qs+0x20/0x20 [ 877.164116] ? zap_class+0x640/0x640 [ 877.167833] ? zap_class+0x640/0x640 [ 877.171555] ? find_held_lock+0x36/0x1c0 [ 877.175627] ? handle_mm_fault+0x42a/0xc70 [ 877.179895] ? lock_downgrade+0x900/0x900 [ 877.184047] ? check_preemption_disabled+0x48/0x280 [ 877.189070] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 877.193999] ? kasan_check_read+0x11/0x20 [ 877.198149] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 877.203430] ? rcu_softirq_qs+0x20/0x20 [ 877.207408] ? trace_hardirqs_off_caller+0x310/0x310 [ 877.212516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 877.218058] ? check_preemption_disabled+0x48/0x280 [ 877.223083] handle_mm_fault+0x54f/0xc70 [ 877.227153] ? __handle_mm_fault+0x5be0/0x5be0 [ 877.231746] ? find_vma+0x34/0x190 [ 877.235293] __do_page_fault+0x5e8/0xe60 [ 877.239353] ? trace_hardirqs_off+0xb8/0x310 [ 877.243775] do_page_fault+0xf2/0x7e0 [ 877.247581] ? vmalloc_sync_all+0x30/0x30 [ 877.251734] ? error_entry+0x70/0xd0 [ 877.255451] ? trace_hardirqs_off_caller+0xbb/0x310 [ 877.260469] ? trace_hardirqs_on_caller+0xc0/0x310 [ 877.265400] ? syscall_return_slowpath+0x5e0/0x5e0 [ 877.270330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 877.275181] ? trace_hardirqs_on_caller+0x310/0x310 [ 877.280206] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 877.285666] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 877.290687] ? prepare_exit_to_usermode+0x291/0x3b0 [ 877.295709] ? page_fault+0x8/0x30 [ 877.299257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 877.304101] ? page_fault+0x8/0x30 [ 877.307644] page_fault+0x1e/0x30 [ 877.311110] RIP: 0033:0x450f90 [ 877.314327] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 877.333229] RSP: 002b:00007f21a76fb7a8 EFLAGS: 00010202 [ 877.338590] RAX: 00007f21a76fb850 RBX: 0000000000000003 RCX: 000000000000000e [ 877.345859] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007f21a76fb850 [ 877.353127] RBP: 000000000072bf00 R08: 00000000000003ff R09: 0000000000000000 06:54:10 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r5, 0x79, 'lpN', "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"}}, 0x110) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 877.360392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21a76fc6d4 [ 877.367665] R13: 00000000004c4edd R14: 00000000004d8530 R15: 00000000ffffffff [ 877.392791] EXT4-fs (loop0): inodes count not valid: 6816128 vs 128 [ 877.428366] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 877.451165] EXT4-fs (loop0): inodes count not valid: 6816128 vs 128 [ 877.490990] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 06:54:10 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xf6ffffff00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket(0x1000000000000010, 0x80802, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001fe8)) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0xfffffffffffffe92, 0x1, 0xffffffff, "2c136e010400009f213b728e708400", "5743adb113928413a1570179e219f475ff99791be390aeeac08d040f1651e767bdfcf267a7f73612a12d7749051dddc33ca5904134721a406449ce2bc24586bad8ff6f660edb583191c21015e1ae018d63c1f89ea7cae83e2c7d5a302d800635744af8d3d153ebf95205e590dbe3e2f37b59a88c104e040f0d0cfef5b1863cdd5ca2ef671be03af4a2180788332d2094214545e3cd39dae48b9258e236c0ed826dfbe245124395ee9300054c4f52adad"}, 0xc5, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="c4a288d2d83653cbbfb1e08cd6ed", 0xe, 0xfffffffffffffff9) keyctl$describe(0x6, r4, &(0x7f0000000140)=""/254, 0xfe) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) arch_prctl(0x2002, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={'vlan0\x00', {0x2, 0x4e22, @broadcast}}) lremovexattr(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)=@random={'osx.', '\\/\x00'}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) sendmsg$kcm(r2, &(0x7f0000001d00)={&(0x7f00000005c0)=@xdp={0x2c, 0x6, r5, 0x15}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000300)="1b8f883ddc9ffdae28267da71f4beb2551c21810bdd0a7d542d6029c4dd187fa47de2a37b09f1d133f6d", 0x2a}, {&(0x7f0000001640)="6e4433a88fecc0bc3c5b6797a070381f322d448a22d1c2da5c6f424c39f552da648aa2e9f8ce547622527119a686464598dc733347e1373ca7f637c561700552c72fb2034d5b0f9a848f920a1d7e15b95c479c0fba5f750c87f6f891d82724ac648255d66adb3cac4c8f61ad8c4b0c76c3f72e3373619164629d20939952203a67a6cf4723c13edcc3210520db578ee4f1c146e6d8120b67e40937427d6bcfa67080b0dea640524252507ace", 0xac}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000001700)="92314e1db51c590117d8c343c57d481f7f2006033533abea9d893754b7b4153c300ec650d7caa834674eab14ac12d9df53f3b6e81a4c1c410d101da882a590f62ef1a0f9a72fe74de10a7a13ba0288e9daadb8e07dc793f0884b1f4f578ae2fa650c8d857d67c0abd1fddcf62ccd24ebc5dc83adde4c475e48f8628071a5daf70d97a033314a9b4df2d96c6419e328c432866b05e0dad82b4dcf6d905bee19d2d273fb0685c1d792cb12e1adbb7b76c1c35da9f17a58feb43f433e8706ae7c2ae346d0408ed0f3fc29268b034e5f36bf9634559784a5e39660134c86064420f9b33daee9fa1964b8e1", 0xe9}, {&(0x7f0000001800)="061a0ab8eb1a4145a187c2f6d47f9c91bd257026e9b8629935ad1e2c80be5c7e83936eff3e2b804210b537f0f93a5868565216deb36c84caf6f9c7ba250e53860d6eb540946c75f675754aa3b34a40635495f726ec02cc40225b2d205ac237341ce55f37986ef95a1e33ec11a72110ffaff798efb96b052e400d1149721617929fce1f7dcbb0a200dfc701296d5752405699748b2f0ef9bde828a6e02167bcb6584ee2b376fdd97098913486e6e0aea8a2", 0xb1}, {&(0x7f00000018c0)="2a34ac4f768f4251aba667d514578da87abafb0b10014b337f746c042008f91502a92c8b", 0x24}, {&(0x7f0000001900)="677e6a5519", 0x5}], 0x8, &(0x7f00000019c0)=[{0xc8, 0x111, 0x3, "e301f88647118755b32e83b70b46886326d206d948178e2bf234efecd187b9c3827240ab2ed68db69dea87c091fbf54b4fa1a28755b067e1cf32b8372f5b48cd5d7a0619f6fec6b3cc07528992912a820cb9309bad4c2cadef01c8131d0ca256d20a265797eb3ea46a9489f43b7f835194ca598d047309384c2c9b26996942760e00c6062afecff169e78bae77783403e96b65d57cf8161810c06e3a62ebf8aed3aa6ace47b50a508c91007acb87fc6977196cfe"}, {0x80, 0x110, 0x1ff, "b4f13e0f3f5be94411a516f7809f80df159160f369aa2ad35fd1e31529170a7fca9ccbf5be60f651f2b5083f7972d0ac1d305b6a98d244f4bff185570bd82f964e60e0ebc7be79b949241e6b95853d6bbf8e506512696fd6badb1e336492e372d632946262c761e9619e"}, {0xb8, 0x10d, 0xee01, "97501346dc02198faf348f8e29a936d2db4b27a0724608225871f4e87e55782dbd5ce8219fd72f75288b95594036e0ce46dfea9deac22d82c584c699bb2d72a1a42abfacd92b7bfe7657d1315b17b27499f3f0aec6d0d3b895c2356b7e499999fe0d1de92a9c64ae692e3e41d3bb2793d6ca84948a653329a51ebd2630783dfcf59fbc028775ef162ab0b4b87dc1944b5665ca4a2519703725c57628732c24ba21dd7f9e"}, {0x70, 0x10d, 0xea, "431a8dcad71155372853f2e0b35e958c80741ca358081f4173fa1a74839cc13247cf24ceea423f337e10b7b51c974415a12c2f47fd8e0427b9c4519f3cf807fcee9300ef886eaaf3d4351e7c9a6977b95409641b9af94a75f9db99f942674003"}, {0x40, 0x1ff, 0x6, "9fe5a7c76a715f59838cda1564d5d73c72ec6fc5670082708b6bd9aa1eb7d84e5e9c32884d6ef93914d989bb49"}, {0x58, 0x13a, 0x4, "15466c6b267149c6f974b8b1c81a556925a8e6f52c1c86f33d3c857548604dca157072bc2e8f3176e86edd81085440c5cb4da8a872d5807828e37ec7637ca15f33"}, {0x10, 0x184}], 0x318, 0x4000800}, 0x4000040) 06:54:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800001020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:10 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000007c0)={0xfc8c, 0x10001, 0x301f, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r2 = request_key(&(0x7f0000000700)='blacklist\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)='smackfstransmute', 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000380)="5e2fd5a582c4fed9de3cdfbe8888cef6541879d3cba7189f", 0x18, r2) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000800)={0x0, 0x8, 0x6, 0x1, 0x10000, 0x8001, 0xbb1c, 0x291, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x800, 0x1, 0x100000001, 0x8001, 0x20}}, &(0x7f0000000900)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000a00)={r5, 0x80000001, 0x63, 0x1, 0x800, 0x6}, &(0x7f0000000a40)=0x14) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fc00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 877.695303] EXT4-fs (loop0): inodes count not valid: 33620096 vs 128 [ 877.764367] FAULT_FLAG_ALLOW_RETRY missing 70 [ 877.774604] EXT4-fs (loop2): inodes count not valid: 64640 vs 128 [ 877.793197] CPU: 0 PID: 11767 Comm: syz-executor5 Not tainted 4.19.0+ #89 [ 877.800148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.809507] Call Trace: [ 877.812111] dump_stack+0x244/0x39d [ 877.815768] ? dump_stack_print_info.cold.1+0x20/0x20 [ 877.820996] handle_userfault.cold.32+0x47/0x62 [ 877.825717] ? userfaultfd_ioctl+0x54a0/0x54a0 [ 877.830324] ? mark_held_locks+0x130/0x130 [ 877.834576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 877.839603] ? futex_wait_setup+0x266/0x3e0 [ 877.839640] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 877.849161] ? userfaultfd_ctx_put+0x830/0x830 [ 877.849176] ? futex_wait+0x5b1/0xa50 [ 877.849198] ? print_usage_bug+0xc0/0xc0 [ 877.861595] ? print_usage_bug+0xc0/0xc0 [ 877.865687] ? print_usage_bug+0xc0/0xc0 [ 877.869764] ? zap_class+0x640/0x640 [ 877.873488] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 877.878599] ? futex_wake+0x304/0x760 [ 877.878631] ? find_held_lock+0x36/0x1c0 [ 877.878668] ? __handle_mm_fault+0x4bb0/0x5be0 [ 877.878689] ? lock_downgrade+0x900/0x900 [ 877.891116] ? kasan_check_read+0x11/0x20 [ 877.891133] ? do_raw_spin_unlock+0xa7/0x330 [ 877.891149] ? do_raw_spin_trylock+0x270/0x270 [ 877.891167] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 877.891199] __handle_mm_fault+0x4bbd/0x5be0 [ 877.899488] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 877.899510] ? zap_class+0x640/0x640 [ 877.899525] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 877.899539] ? kasan_check_read+0x11/0x20 [ 877.899560] ? rcu_softirq_qs+0x20/0x20 [ 877.908541] ? zap_class+0x640/0x640 [ 877.908558] ? zap_class+0x640/0x640 [ 877.908580] ? find_held_lock+0x36/0x1c0 [ 877.908605] ? handle_mm_fault+0x42a/0xc70 [ 877.947583] ? lock_downgrade+0x900/0x900 [ 877.955872] ? check_preemption_disabled+0x48/0x280 [ 877.955892] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 877.955909] ? kasan_check_read+0x11/0x20 [ 877.955924] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 877.955939] ? rcu_softirq_qs+0x20/0x20 [ 877.955960] ? trace_hardirqs_off_caller+0x310/0x310 [ 877.974173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 877.974191] ? check_preemption_disabled+0x48/0x280 [ 877.974217] handle_mm_fault+0x54f/0xc70 [ 877.974237] ? __handle_mm_fault+0x5be0/0x5be0 [ 877.974258] ? find_vma+0x34/0x190 [ 877.974280] __do_page_fault+0x5e8/0xe60 [ 877.974308] ? trace_hardirqs_off+0xb8/0x310 [ 877.974332] do_page_fault+0xf2/0x7e0 [ 877.974352] ? vmalloc_sync_all+0x30/0x30 [ 878.027641] ? error_entry+0x70/0xd0 [ 878.031357] ? trace_hardirqs_off_caller+0xbb/0x310 [ 878.036361] ? trace_hardirqs_on_caller+0xc0/0x310 [ 878.041279] ? syscall_return_slowpath+0x5e0/0x5e0 [ 878.046212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 878.051055] ? trace_hardirqs_on_caller+0x310/0x310 [ 878.056068] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 878.061513] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 878.066533] ? prepare_exit_to_usermode+0x291/0x3b0 [ 878.071541] ? page_fault+0x8/0x30 [ 878.075084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 878.079931] ? page_fault+0x8/0x30 [ 878.083474] page_fault+0x1e/0x30 [ 878.086934] RIP: 0033:0x450f90 [ 878.090136] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 878.109074] RSP: 002b:00007f21a76fb7a8 EFLAGS: 00010202 06:54:11 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x48040, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000180)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getuid() write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000700)={0x60, 0xffffffffffffffda, 0x4, {{0x8ed8, 0x6e1, 0x8001, 0xe2a, 0xea5, 0x400, 0x20, 0x6}}}, 0x60) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r4 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000840)={r5}) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0xc4f8) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000780)={0xa0, 0x0, 0x2, {{0x4, 0x0, 0x658, 0xfffffffffffffffc, 0x1f, 0x7059, {0x5, 0x5, 0x6964, 0xfff, 0x7ec, 0x9, 0x10001, 0xfff, 0x100000002000, 0x6, 0x9, r2, r3, 0xffffffffffff7fff, 0x3}}, {0x0, 0x4}}}, 0xa0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000b80)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x3f}}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="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"]) 06:54:11 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xfeffff3f00000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 878.114443] RAX: 00007f21a76fb850 RBX: 0000000000000003 RCX: 000000000000000e [ 878.121716] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007f21a76fb850 [ 878.128984] RBP: 000000000072bf00 R08: 00000000000003ff R09: 0000000000000000 [ 878.136237] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21a76fc6d4 [ 878.143491] R13: 00000000004c4edd R14: 00000000004d8530 R15: 00000000ffffffff 06:54:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000102000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 878.235547] EXT4-fs (loop2): inodes count not valid: 64640 vs 128 06:54:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x3) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 06:54:11 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000003d802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 878.379483] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:11 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r5 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 878.460960] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 878.532114] EXT4-fs (loop0): group descriptors corrupted! [ 878.555525] EXT4-fs (loop2): inodes count not valid: 50331776 vs 128 06:54:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffff402000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffff402000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 878.764509] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 878.801907] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 06:54:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800068000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 878.847374] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 06:54:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 878.932768] EXT4-fs (loop0): inodes count not valid: 6815872 vs 128 [ 878.987366] EXT4-fs (loop0): inodes count not valid: 6815872 vs 128 06:54:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806801000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x3) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 879.097538] EXT4-fs (loop2): inodes count not valid: 786560 vs 128 06:54:12 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x100000000000000}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 879.156016] EXT4-fs (loop0): inodes count not valid: 92288 vs 128 [ 879.167030] EXT4-fs (loop2): inodes count not valid: 786560 vs 128 06:54:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806c00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 879.236642] EXT4-fs (loop0): inodes count not valid: 92288 vs 128 06:54:12 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 879.395111] EXT4-fs (loop2): inodes count not valid: 27776 vs 128 06:54:12 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000380)={r4, 0x0, 0x20, 0x0, 0x6}, &(0x7f0000000700)=0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 879.485237] EXT4-fs (loop2): inodes count not valid: 27776 vs 128 [ 879.519614] EXT4-fs (loop0): inodes count not valid: 2176 vs 128 06:54:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 879.611863] EXT4-fs (loop0): inodes count not valid: 2176 vs 128 06:54:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000407fc02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 879.743899] EXT4-fs (loop2): inodes count not valid: 33554560 vs 128 06:54:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80feffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 879.849343] EXT4-fs (loop0): inodes count not valid: 117702784 vs 128 06:54:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800007000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 879.966584] EXT4-fs (loop2): inodes count not valid: 4294966912 vs 128 [ 879.974535] EXT4-fs (loop0): inodes count not valid: 458880 vs 128 [ 880.025414] EXT4-fs (loop2): inodes count not valid: 4294966912 vs 128 [ 880.035876] EXT4-fs (loop0): inodes count not valid: 458880 vs 128 06:54:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80004c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000407fc02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x3) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 880.176313] EXT4-fs (loop0): inodes count not valid: 4980864 vs 128 06:54:13 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0xffffff8c}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:13 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 880.250792] EXT4-fs (loop2): inodes count not valid: 117702784 vs 128 [ 880.268933] EXT4-fs (loop0): inodes count not valid: 4980864 vs 128 06:54:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffffe02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 880.464511] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 880.471965] EXT4-fs (loop0): inodes count not valid: 24704 vs 128 06:54:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ebffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:13 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x280000) accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f0000000380)=0xe, 0x0) r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 880.548109] EXT4-fs (loop2): inodes count not valid: 4294967168 vs 128 [ 880.555545] EXT4-fs (loop0): inodes count not valid: 24704 vs 128 06:54:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 880.735995] EXT4-fs (loop0): inodes count not valid: 4294962048 vs 128 [ 880.770093] EXT4-fs (loop2): inodes count not valid: 24704 vs 128 06:54:14 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x200, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000180)={0x0, 0x5}, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 880.799674] EXT4-fs (loop0): inodes count not valid: 4294962048 vs 128 [ 880.825825] EXT4-fs (loop2): inodes count not valid: 24704 vs 128 06:54:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffff602000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000041002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ffffffeb02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 881.049507] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 [ 881.087283] EXT4-fs (loop2): inodes count not valid: 67108992 vs 128 06:54:14 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r5 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 881.181786] EXT4-fs (loop2): inodes count not valid: 67108992 vs 128 [ 881.251389] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 06:54:14 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xb6b3, 0x200100) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x7, 0x60000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) r4 = getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000440)={{0x6, 0x9}, 'port0\x00', 0x80, 0x190000, 0x3f, 0x8, 0x15, 0x4, 0x7f, 0x0, 0x7}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000cc0)={0x320, 0x0, 0x1, [{{0x6, 0x0, 0x1, 0x853, 0x3, 0x101, {0x3, 0x0, 0x400, 0x1, 0x6, 0x32d7, 0xff, 0x7cae8014, 0x8, 0x5, 0x7f, r4, r3, 0x6, 0x4}}, {0x3, 0x6, 0x1, 0x7f, '\x00'}}, {{0x0, 0x1, 0x81, 0x81, 0x6, 0x78a, {0x1, 0xc1f, 0x1f, 0x200, 0x1, 0x1, 0xffffffffffffffc8, 0x0, 0x80, 0xfffffffffffffff7, 0x9, r5, r6, 0xffffffffffffffff, 0x4}}, {0x4, 0xffffffffffffff01, 0x8, 0x8000, 'vboxnet0'}}, {{0x5, 0x0, 0x5452, 0x7ff, 0x7fffffff, 0x8001, {0x1, 0x40, 0x2, 0x7ff, 0x80, 0x3, 0x7, 0x4, 0x1000, 0x101, 0x4, r2, r6, 0x7, 0x7}}, {0x6, 0x7, 0x8, 0x5, 'rootmode'}}, {{0x4, 0x2, 0x266b, 0x1000, 0x10001, 0xfffffffffffff000, {0x5, 0x8, 0x6641f230, 0xe7e6, 0x8, 0xc6, 0x1, 0x4, 0x1000, 0x5, 0xfffffffffffffffe, r5, r6, 0x80, 0x92}}, {0x6, 0x7, 0x0, 0x2}}, {{0x1, 0x1, 0x5, 0x1f, 0x46, 0x4, {0x4, 0xd661, 0x62, 0x800, 0x2, 0x8, 0x0, 0x1f, 0x20, 0x4, 0xffffffffffffffc0, r5, r7, 0xd, 0xd9d}}, {0x1, 0xd08d, 0x0, 0xfffffffffffffff9}}]}, 0x320) 06:54:14 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000002d000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80002d000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 881.382365] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 881.392439] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 881.411673] EXT4-fs (loop2): group descriptors corrupted! [ 881.428493] EXT4-fs (loop0): inodes count not valid: 2949248 vs 128 06:54:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8003d8000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 881.497378] EXT4-fs (loop0): inodes count not valid: 2949248 vs 128 [ 881.504518] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 881.536087] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 881.550198] EXT4-fs (loop2): group descriptors corrupted! 06:54:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000003f000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807a00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 881.657273] EXT4-fs (loop0): inodes count not valid: 14156672 vs 128 [ 881.779122] EXT4-fs (loop0): inodes count not valid: 31360 vs 128 [ 881.787098] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 881.797963] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 881.810289] EXT4-fs (loop2): group descriptors corrupted! 06:54:17 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000006802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800010040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:17 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r5 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:17 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:17 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) ioctl$void(r4, 0xc0045878) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 884.114099] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 884.151696] EXT4-fs (loop2): inodes count not valid: 68157568 vs 128 [ 884.152389] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800006000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 884.212327] EXT4-fs (loop0): group descriptors corrupted! [ 884.282941] EXT4-fs (loop2): inodes count not valid: 393344 vs 128 [ 884.318603] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 884.328141] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 884.338600] EXT4-fs (loop0): group descriptors corrupted! [ 884.363326] EXT4-fs (loop2): inodes count not valid: 393344 vs 128 06:54:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800020000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000480002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 884.472130] EXT4-fs (loop0): inodes count not valid: 2097280 vs 128 [ 884.491186] EXT4-fs (loop2): inodes count not valid: 1207959680 vs 128 [ 884.539838] EXT4-fs (loop0): inodes count not valid: 2097280 vs 128 [ 884.563031] EXT4-fs (loop2): inodes count not valid: 1207959680 vs 128 06:54:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="804800000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000040800000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000c0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 884.684374] EXT4-fs (loop0): inodes count not valid: 18560 vs 128 [ 884.691204] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (8) [ 884.801404] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (8) [ 884.828903] EXT4-fs (loop0): inodes count not valid: 201326720 vs 128 06:54:18 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f96705f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c41501b08"]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3f, &(0x7f0000000780)=""/211, &(0x7f00000000c0)=0xd3) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000020000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000003d802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:18 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:18 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r5 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:18 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5c5fd50252e1489bb9ca35b955b06c5787f0fafa84eff91702d842cb355da4b3e4e5641fb20e9c680f75a9391aa315831733401d8a4636fd9ab8d98927021c59b9440db2fa33b4c76d50cc38a4ace1418369deb8d6ce3a798fb9bab85f260ca3bf30c3146f52d95faedcb2b88738d8e13b9aa626006cf93c83c027231a52aa6c8519dc62940e6cbe3ea32575171e1b79cc4deef931b265e942e05d8f168db5c7"]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000000c0)) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 885.189130] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 885.198444] EXT4-fs (loop0): inodes count not valid: 50331776 vs 128 [ 885.214377] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800700000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 885.245481] EXT4-fs (loop2): group descriptors corrupted! 06:54:18 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 885.360826] EXT4-fs (loop0): inodes count not valid: 1920 vs 128 [ 885.388799] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:18 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75c22c4c1e3d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800048000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 885.425655] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 885.438213] EXT4-fs (loop2): group descriptors corrupted! [ 885.460983] EXT4-fs (loop0): inodes count not valid: 1920 vs 128 06:54:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:18 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000012c0)="7c8c15c3bec6dd10155d2ed7c43bcf3cf6ce37559e729ee2fc9906d9ff784a50f054098acd33e687d1461c686e8999e3be19b5ffaa5cf2", 0x37}], 0x1, &(0x7f0000001640)=[@iv={0x70, 0x117, 0x2, 0x56, "10b6693242d699082743764ab372e1c27f590ed5808035971e9b2be70d08af764efab52e81dfc6bcc2a53fb8654fd851003bb2173d6d09b998d6f06b32fc59ed0a0dbd0c06bbe8bb0657474cc670f0dcf4355d5090ac"}], 0x70, 0x8000}], 0x1, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r4 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r3, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r3, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000d80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643d4cd27d9743c530fe1122a3e18400648577a85794d0a3ecbc0c73db26a5e51f996cb8c4bd1871b700a1f91348a259f8937ac760847bd1cf4124bd29be48b46a4e29857114c49727ec00416808ca3a14491fb20944cf32d860d6a29881c10a2861a9b220581032c7a083e92afc2109fddc35cae5f97943b9d7a31c7b5f6f55adad57ef85712736f5b341c4f226393cf283235d94c68d36158617bf7be6f41b38a52e872ad411e0aa02010491224f3b201c7c077e89b3b2356a4d2d9f5debbf6c000000000000000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000e86,audit,subj_role=blksize,smackfstransmute=system.posix_acl_default\x00,subj_user=system.posix_acl_default\x00,\x00']) [ 885.677884] EXT4-fs (loop0): inodes count not valid: 786560 vs 128 [ 885.689000] EXT4-fs (loop2): inodes count not valid: 4718720 vs 128 06:54:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000502000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000c0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 885.863826] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 885.874747] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 885.894170] EXT4-fs (loop0): group descriptors corrupted! 06:54:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f102000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:19 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 885.921081] EXT4-fs (loop2): inodes count not valid: 201326720 vs 128 06:54:19 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 886.046023] EXT4-fs (loop2): inodes count not valid: 201326720 vs 128 06:54:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000006c0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 886.110965] EXT4-fs (loop0): inodes count not valid: 192896 vs 128 [ 886.206492] EXT4-fs (loop0): inodes count not valid: 192896 vs 128 [ 886.221654] EXT4-fs (loop2): inodes count not valid: 1811939456 vs 128 06:54:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f000000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 886.295943] EXT4-fs (loop2): inodes count not valid: 1811939456 vs 128 [ 886.328036] EXT4-fs (loop0): inodes count not valid: 61568 vs 128 06:54:19 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000740002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="806c00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 886.464710] EXT4-fs (loop2): inodes count not valid: 1946157184 vs 128 [ 886.494009] EXT4-fs (loop0): inodes count not valid: 27776 vs 128 06:54:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000069000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 886.530228] EXT4-fs (loop2): inodes count not valid: 1946157184 vs 128 [ 886.550921] EXT4-fs (loop0): inodes count not valid: 27776 vs 128 06:54:19 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) bind$nfc_llcp(r3, &(0x7f0000000700)={0x27, 0x1, 0x2, 0x5, 0x5, 0x1, "2a97aab58afbd8e8ec75e2a1dc76d86b1a3708c3910118c9bb49c1ae4b9087f77e449983c493758d62c0387809d75919c5d1600499dd93685f37cd49d886cd", 0x10}, 0x60) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="807400000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 886.678661] EXT4-fs (loop2): inodes count not valid: 128 vs 256 06:54:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80007a000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 886.728374] EXT4-fs (loop0): inodes count not valid: 29824 vs 128 06:54:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="801004000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:20 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:20 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 886.907957] EXT4-fs (loop2): inodes count not valid: 7995520 vs 128 [ 886.977812] EXT4-fs (loop0): inodes count not valid: 266368 vs 128 06:54:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800002010002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 887.050497] EXT4-fs (loop2): inodes count not valid: 7995520 vs 128 06:54:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800005000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 887.186461] EXT4-fs (loop0): inodes count not valid: 16908416 vs 128 [ 887.261357] EXT4-fs (loop2): inodes count not valid: 327808 vs 128 [ 887.308208] EXT4-fs (loop2): inodes count not valid: 327808 vs 128 [ 887.326416] EXT4-fs (loop0): inodes count not valid: 16908416 vs 128 06:54:20 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) read$FUSE(r1, &(0x7f00000040c0), 0x1000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pwritev(r4, &(0x7f0000000ac0)=[{&(0x7f0000000180)="4acf32c184ed2467f2", 0x9}, {&(0x7f0000000440)="b08349d731739bb75c23f09d29e30413730b56b86c21203bf788d79064edadd7f7f33e8dd971f6e1496e717b6dc320e33646e96a671cd4f996fef862067f1107b597dc10b839e1998f67d0f1bc0039f8828688220e09b896f36ce62161cee919aa5607f4a2efaf1af522b7d278d76a45077f828bab313c8916c234779794669bb616d257e07684d7b39f84c2f615fdf5ac39bee0859425ffc3f6800ba5cb918550a9d4bdd0c394ecba6d0899896039e9bcc504b61bcdd25d264d94c08bfdf7226ba9b0f21bbfffd5ac71c259b37da2b5ddd7057aaddc7cda0d4424638d3f43", 0xdf}, {&(0x7f0000000700)="dbeb52c3ef50129c83ec3d2580b48417ae7629c7dc1c1e84feecfb5105143dbe69a908df34f5f1658f525bb4232851e75964f6d43557dc8da0d0243dfb0aa484759ea0b9e1939fa8acf63bd7af895b51c017009177d7778189c945d3ef635c3a14f3578ca4e10d784adc70c1ca57a0d7b0d105d65c6e4190c32fc7bf531b401d405257c85f68024bf3d61b5b52d912c1a1df366e250cbea9069c36988979e1708ef734e54cdf9f9ada67b7b41fadd2b4b08a30699e87f30c59c8d0a90f30aa73a70eadbe38d1e0057aeae95ea15fbfca398e788822bbf85e2d395c9ed08cc21b73e068d3540b36", 0xe7}, {&(0x7f0000000380)="67b2fe641ba82c71193fda517f18f7dc361612b0229c15a9a023f49bf6861171518671f5e50e2abc49e1da7d06da45", 0x2f}, {&(0x7f0000000540)="8d762e32bd247a33121745f863767eb37c586f2d1f9a130f7011c314f8f8fd8a35420c82a586afe4d058acf3f322bc667c79881bfdfa5d153fb13d31819ff6534663a8d8d4332dbdec4925876b8fc89988937f1a44", 0x55}, {&(0x7f0000000a00)="4e29cf32df3c2203a17adbeaafe144a18db992322ded13ccd2c72696d5ac73780357f0dadb57c4c9324acd504e7b512d506e7a2f247360567bc0bfcbdaf61409dfe3de98fde0e7c9bbd444afc569c412032deec4fe15c909a191b73295b61865542c3dc726dbb8d3784bb5c7bedb7d27a218ddb030a611c6e3d80b44a71f12a45d6bce6a7f20c4ce4db4", 0x8a}, {&(0x7f0000002000)="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", 0x1000}], 0x7, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000000c0), 0x4) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x5) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f00000003c0)={&(0x7f0000ffe000/0x2000)=nil, 0x4, 0x2, 0x24, &(0x7f0000ffc000/0x4000)=nil, 0x3f}) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000fc0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800400000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 887.487044] EXT4-fs (loop2): inodes count not valid: 4227858560 vs 128 [ 887.506603] EXT4-fs (loop0): inodes count not valid: 1152 vs 128 06:54:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffdfd02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:20 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[@ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64], @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r2, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES64=r0], 0x56) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) r3 = getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x4, &(0x7f0000000ac0)=[{&(0x7f0000000700)="8c7d67632b1b7070175f368b9fc2ff59eb7262e47f068711a64a034a58d7f69bbcc2ea2895893606af99f4dfec74e023b61a1ed54dd1aa409835210a0577d13c3c6982dfe8a49a3b85b87d421c6160cd7b6e4b5585d1be1e2b86da430f9b7f1cca317ec2a7ed1da7a0bf2691b2", 0x6d, 0x1}, {&(0x7f0000000380)="c0d3164ff22bda4763801697534321ce0c4cc7ae83e69873d76c7173d081d06bd54aded0edb7daa5162fe5e2d0839a1bc373edbb04", 0x35, 0x1}, {&(0x7f0000000780)="b31afd8b985b5b5f8a746bbb5717cc4d3e725c5e0892588a80210154663b48edad3aae46511b20ebda14e19ebf216e384543beedf416bb9f5df7445e7134d37c511f7f9f2e49d43787a8ec7e2b16607a1944d9829c7105bc4fc04dc0c631c9f252ab17d31cefd989e1cf60d885b20ba1b3e405dcabdf8b03e3758c280782953e4f261113ad069dfb9dd786f520557cab5dca633e8857157a737195f8ac9ef9924665ca2c9209fdaa6e4c58012b465d82d7784a81206bcb3861e55d7d608afaee7177ded5b22c5f45dd96726756a56e3eabef", 0xd2, 0x1f}, {&(0x7f0000000a00)="f106df660163626586b662685c7f75ab4797d8618cac76af5895a95cbf7af0b8de36397f2002ec00a24cf8686016235879afa968493fc4533c29352ad036194b289a8ad25883c2a2f63be4ecab53ed3c20da85373ce1788c2c56281768e8489deb213e0bbd98ef11f2747a6f2a9afe961f110197d220684a1649e3d4d0106f946261cdf3d652845e108a600307d5197b9782747d5a7a4a2a5b6da0b46cff6f312010fdbce3fbcca9d63db07968974bd5c4f6", 0xb2, 0x3}], 0x4000, &(0x7f0000000c80)={[{@expose_privroot='expose_privroot'}, {@conv='conv'}, {@data_writeback='data=writeback'}, {@replayonly='replayonly'}, {@balloc_test4='block-allocator=test4'}, {@balloc_test4='block-allocator=test4'}, {@noacl='noacl'}, {@data_journal='data=journal'}, {@barrier_none='barrier=none'}], [{@subj_type={'subj_type', 0x3d, '!\\'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_user={'subj_user', 0x3d, 'fd'}}, {@fsname={'fsname', 0x3d, '/dev/snapshot\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x34, 0x77, 0x66, 0x38, 0x7f, 0x0, 0x38], 0x2d, [0x63, 0x0, 0x37, 0x33], 0x2d, [0x35, 0x77, 0x30, 0x76], 0x2d, [0x73, 0x77, 0x66, 0x73], 0x2d, [0x33, 0x66, 0x7d, 0x0, 0x7f, 0x37, 0x30, 0x35]}}}]}) r4 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 887.575647] EXT4-fs (loop2): inodes count not valid: 4227858560 vs 128 06:54:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000025b0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 887.741242] EXT4-fs (loop0): inodes count not valid: 4261412736 vs 128 [ 887.792745] EXT4-fs (loop0): inodes count not valid: 4261412736 vs 128 [ 887.823738] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "subj_type=!\" 06:54:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:21 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:21 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 887.865621] EXT4-fs (loop2): inodes count not valid: 1526857856 vs 128 [ 887.954023] EXT4-fs (loop0): inodes count not valid: 67108992 vs 128 06:54:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000025b02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000000a000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 888.109548] EXT4-fs (loop0): inodes count not valid: 33554560 vs 128 [ 888.140176] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 888.153919] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 888.168406] EXT4-fs (loop2): group descriptors corrupted! [ 888.181907] EXT4-fs (loop0): inodes count not valid: 33554560 vs 128 06:54:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000004000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 888.290513] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 888.300407] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 888.315860] EXT4-fs (loop2): group descriptors corrupted! 06:54:21 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x925) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt(r4, 0x3a, 0x1, &(0x7f0000000080)="16", 0x1) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/fuse\x00'}}]}}) write$P9_RAUTH(r6, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x0, 0x2, 0x7}}, 0x14) 06:54:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fdfdffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000003f0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 888.540143] EXT4-fs (loop0): inodes count not valid: 4294835584 vs 128 [ 888.553521] EXT4-fs (loop2): inodes count not valid: 1056964736 vs 128 06:54:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000003000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 888.602542] EXT4-fs (loop0): inodes count not valid: 4294835584 vs 128 [ 888.710644] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 888.720276] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 888.730041] EXT4-fs (loop2): group descriptors corrupted! [ 888.795815] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 888.805435] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 888.815217] EXT4-fs (loop2): group descriptors corrupted! 06:54:24 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:24 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x210100, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x2, 0x5, 0xffffffffffffd090, 0x381, 0xfffffffffffffff8, 0x9, 0x7f, 0x100000001, 0xfff, 0xdc, 0x3f}, 0xb) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80feffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800002000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:24 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:24 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="29e0edec56da41e131bba8f0babba68d", 0x10) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 890.884645] EXT4-fs (loop0): inodes count not valid: 4294966912 vs 128 [ 890.895421] EXT4-fs (loop2): inodes count not valid: 131200 vs 128 06:54:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fcfdffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 890.944853] EXT4-fs (loop0): inodes count not valid: 4294966912 vs 128 [ 890.964332] EXT4-fs (loop2): inodes count not valid: 131200 vs 128 06:54:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800060000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000003f02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 891.077915] EXT4-fs (loop0): inodes count not valid: 4294835328 vs 128 [ 891.103782] EXT4-fs (loop2): inodes count not valid: 6291584 vs 128 06:54:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000230002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 891.184413] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 891.193965] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 891.203876] EXT4-fs (loop0): group descriptors corrupted! 06:54:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000007a02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 891.325550] EXT4-fs (loop2): inodes count not valid: 587202688 vs 128 [ 891.364077] EXT4-fs (loop2): inodes count not valid: 587202688 vs 128 06:54:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000030002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 891.395442] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 891.404978] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 891.414792] EXT4-fs (loop0): group descriptors corrupted! [ 891.535573] EXT4-fs (loop2): inodes count not valid: 50331776 vs 128 06:54:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000080002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 891.602346] EXT4-fs (loop2): inodes count not valid: 50331776 vs 128 [ 891.678907] EXT4-fs (loop0): inodes count not valid: 134217856 vs 128 [ 891.753556] EXT4-fs (loop0): inodes count not valid: 134217856 vs 128 06:54:25 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) fstat(r1, &(0x7f0000000700)) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:25 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:25 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000002d0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:25 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) read$FUSE(r1, &(0x7f0000001000), 0x1100) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800003ffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 891.921010] EXT4-fs (loop0): inodes count not valid: 4278386816 vs 128 [ 891.958717] EXT4-fs (loop2): inodes count not valid: 754974848 vs 128 06:54:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800074f64c92000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 892.013242] EXT4-fs (loop0): inodes count not valid: 4278386816 vs 128 06:54:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800074000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:25 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 892.133824] EXT4-fs (loop2): inodes count not valid: 4134797440 vs 384 06:54:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800008000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 892.206714] EXT4-fs (loop0): inodes count not valid: 7602304 vs 128 06:54:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8003be000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 892.378843] EXT4-fs (loop2): inodes count not valid: 524416 vs 128 [ 892.403487] EXT4-fs (loop0): inodes count not valid: 12452736 vs 128 06:54:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800068000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 892.429491] EXT4-fs (loop2): inodes count not valid: 524416 vs 128 [ 892.459480] EXT4-fs (loop0): inodes count not valid: 12452736 vs 128 [ 892.602744] EXT4-fs (loop2): inodes count not valid: 6815872 vs 128 [ 892.638152] EXT4-fs (loop2): inodes count not valid: 6815872 vs 128 06:54:26 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) finit_module(r3, &(0x7f00000000c0)='\x00', 0x3) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80007a000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:26 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:26 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) setgroups(0x5, &(0x7f00000000c0)=[r3, r3, r3, r3, r3]) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f00000003c0)='./file0\x00'}, 0xffffffffffffffb5) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 892.927618] EXT4-fs (loop2): inodes count not valid: 786560 vs 128 [ 892.943721] EXT4-fs (loop0): inodes count not valid: 7995520 vs 128 [ 893.014952] EXT4-fs (loop2): inodes count not valid: 786560 vs 128 [ 893.037351] EXT4-fs (loop0): inodes count not valid: 7995520 vs 128 06:54:26 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800080f10002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:26 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f00000000c0)={0xf, {0x8951, 0xfff, 0x6}}) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000fc000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.236963] EXT4-fs (loop0): inodes count not valid: 16515200 vs 128 [ 893.250359] EXT4-fs (loop2): inodes count not valid: 4051697792 vs 128 06:54:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800300000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.289494] EXT4-fs (loop0): inodes count not valid: 16515200 vs 128 [ 893.308625] EXT4-fs (loop2): inodes count not valid: 4051697792 vs 128 06:54:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000680002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.439550] EXT4-fs (loop0): inodes count not valid: 896 vs 128 [ 893.467107] EXT4-fs (loop2): inodes count not valid: 1744830592 vs 128 06:54:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000a00000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.500497] EXT4-fs (loop0): inodes count not valid: 896 vs 128 06:54:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80ffffff8c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.636854] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (10) [ 893.688093] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 [ 893.723938] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (10) 06:54:26 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 893.743966] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 06:54:27 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xffff, 0x8000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000480)=[{{}, 0x4, 0x5}, {{r4, r5/1000+10000}, 0x15, 0xb9a0}, {{0x0, 0x7530}, 0x14, 0x7, 0x800}, {{}, 0x1f, 0x6, 0x4}, {{r6, r7/1000+10000}, 0x0, 0xfff, 0x100000000}, {{0x0, 0x7530}, 0x5, 0x0, 0x2}, {{0x77359400}, 0x14, 0x3f, 0x8001}, {{0x77359400}, 0x16, 0x5, 0x5}, {{r8, r9/1000+30000}, 0x17, 0xfff, 0x7fff}], 0xd8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r10}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800178000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000065000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.913085] EXT4-fs (loop0): inodes count not valid: 7864704 vs 128 06:54:27 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800005000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 893.958421] EXT4-fs (loop2): inodes count not valid: 128 vs 256 [ 894.089287] EXT4-fs (loop0): inodes count not valid: 327808 vs 128 [ 894.144548] EXT4-fs (loop0): inodes count not valid: 327808 vs 128 06:54:29 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002440)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000a00300001801000018010000180100001801000018010000080300000803000008030000080300000803000004000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x400) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800179000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80006c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:29 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:29 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:29 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f00000005c0), &(0x7f0000000700)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d384c42174acc115ca0a34e2bfbc8ee7d42377875011bd75cf2cce4106c7f4cbb25", @ANYRESDEC=0x0, @ANYBLOB="430062e2b5a2cb820d8400000000000000000000000000"]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4224, 0x301080) clock_gettime(0x0, &(0x7f0000000380)) futimesat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={{0x77359400}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() socket$rds(0x15, 0x5, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r6 = semget(0x1, 0x3, 0x2) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000340)) semop(r6, &(0x7f0000000300)=[{0x4, 0xb2, 0x1000}], 0x1) r7 = syz_open_dev$amidi(&(0x7f0000000540)='/dev/amidi#\x00', 0x3, 0x101000) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000580)) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d300104303030839c92aa30303030306538362c617564696e746578743d73746166665f752c7569643d000000000000", @ANYRESDEC=r5, @ANYBLOB=',subj_role=blksize,smackfstransmute=system.posix_acl_default\x00,subj_user=system.posix_acl_default\x00,\x00']) [ 896.385935] EXT4-fs (loop0): inodes count not valid: 7930240 vs 128 [ 896.411635] EXT4-fs (loop2): inodes count not valid: 7078016 vs 128 06:54:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80d803000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:29 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:29 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3dc31b50, @mcast1, 0x1}, r6}}, 0x30) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) fsetxattr$security_selinux(r5, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x1) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 896.496603] EXT4-fs (loop2): inodes count not valid: 7078016 vs 128 06:54:29 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 896.562167] EXT4-fs (loop0): inodes count not valid: 252032 vs 128 06:54:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80005b020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 896.656275] EXT4-fs (loop0): inodes count not valid: 252032 vs 128 06:54:29 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 896.784488] EXT4-fs (loop2): inodes count not valid: 39518336 vs 128 [ 896.888145] EXT4-fs (loop2): inodes count not valid: 39518336 vs 128 06:54:30 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r1 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800410000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:30 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800004100002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 897.301501] EXT4-fs (loop2): inodes count not valid: 268697728 vs 128 [ 897.314675] EXT4-fs (loop0): inodes count not valid: 1049728 vs 128 06:54:30 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:30 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() getegid() read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 897.377430] EXT4-fs (loop0): inodes count not valid: 1049728 vs 128 [ 897.399975] EXT4-fs (loop2): inodes count not valid: 268697728 vs 128 06:54:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80006c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000000f000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:30 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x7, 0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:30 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 897.664994] EXT4-fs (loop0): inodes count not valid: 7078016 vs 128 [ 897.685742] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffff502000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 897.715277] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 897.739187] EXT4-fs (loop2): group descriptors corrupted! 06:54:31 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 897.799554] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 897.821564] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 [ 897.909670] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 897.922758] EXT4-fs (loop2): group descriptors corrupted! 06:54:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000eb02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000010000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:33 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:33 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:33 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='d=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f0000000c80)=""/142, 0x8e}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000380)=""/24, 0x18}], 0x6, &(0x7f0000002000)=""/4096, 0x1000, 0x81}, 0x5}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000dc0)=""/131, 0x83}, {&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000e80)=""/13, 0xd}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/215, 0xd7}, {&(0x7f0000000fc0)=""/33, 0x21}], 0x6, &(0x7f0000003080)=""/9, 0x9, 0x6aa}}, {{&(0x7f00000050c0)=@sco, 0x80, &(0x7f0000006280)=[{&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/200, 0xc8}, {&(0x7f0000006240)=""/30, 0x1e}], 0x3, &(0x7f00000062c0)=""/234, 0xea, 0x4}, 0x8}, {{0x0, 0x0, &(0x7f0000006640)=[{&(0x7f00000063c0)=""/20, 0x14}, {&(0x7f0000006400)=""/26, 0x1a}, {&(0x7f0000006440)=""/92, 0x5c}, {&(0x7f00000064c0)=""/163, 0xa3}, {&(0x7f0000006580)=""/184, 0xb8}], 0x5, 0x0, 0x0, 0xe26}, 0xef6}, {{&(0x7f00000066c0)=@can, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006740)=""/94, 0x5e}], 0x1, &(0x7f0000006800)=""/204, 0xcc, 0x90b9}, 0x6}, {{&(0x7f0000006900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006980)=""/124, 0x7c}, {&(0x7f0000006a00)=""/106, 0x6a}, {&(0x7f0000006a80)=""/159, 0x9f}, {&(0x7f0000006b40)=""/196, 0xc4}, {&(0x7f0000006c40)=""/69, 0x45}], 0x5, &(0x7f0000006d40)=""/253, 0xfd, 0x3}, 0x3ff}], 0x6, 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000007040)={0x0, 0xf4, "54350f89c4cc0dbc8c401d49e4c1752aaa1345c42588ca9b07611d45fb1afed011027d1f27085d57b815155b2859c32b747083843f0d0c841541638d87352faa52127a2f7f70c67f298dd9e8c3c64c3b65eaddb24e6767e9467c29b59c83006a6f852cc920d674329aed8750512da47890abbfa59cf9378635aaf925eb7755f45e590d54a299243cba83b597bbcceae724eb0e890a38d592f1636f512d527862a9adb4a3f4f93a317cc5cfa676cdd74498d472e516ba3b2d5804560fdf6daa38c58e5a19d5faba212242213d181e4ab27a692d3823bdcd3a6d92c487ee16c81a74d2cf0d9560484be7367c425cc89814065d1ecc"}, &(0x7f0000007140)=0xfc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000007180)={r4, 0x3}, &(0x7f00000071c0)=0x8) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000840)) getgid() r5 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000700)=ANY=[@ANYBLOB="54643d473704000000000000008d81d87477", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0x0000000000000e86,audit,subj_role=blksize,smackfstransmute=system.posix_acl_default\x00,subj_user=system.posix_acl_default\x00,\x00']) 06:54:33 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 900.574927] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 900.584653] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 900.600054] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 900.625481] EXT4-fs (loop2): group descriptors corrupted! [ 900.660389] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80002e020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:33 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 900.723047] EXT4-fs (loop0): group descriptors corrupted! 06:54:34 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 900.827516] EXT4-fs (loop2): inodes count not valid: 36569216 vs 128 [ 900.837000] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x113040, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000380)) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffff8000, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000480)="92331a049c6b2d52ce3338cd1d1b7b88152df327a9e714e263fd0456d446f2bc7f8721b99fb60273c315c184de54c318d51afecbd2ca9141cae46c9383eed7f494554d01f64bc45b1694abaa593e65662856d4811b80a13f77c86545b92f7856cac610e886d73bbcad5c1d", 0x6b, 0x9}, {&(0x7f0000000500)="d9b6a1466eb11c27e554f059a073ed5375e5b406e1874cae62252237b10579bf0a446ee2a0a54f1f144377f37972835c7f15e4c3472f55df8c5b637d3cca5e2ab75e91b0c8519f22f2acfb25a8d8ec33087a6ce9a61c290d9f7a9a325c520475a8a2562be4713a747ebc5e5193292683de5fccc9a4c3c2aaeb7d3ed56cbe8bfa3918c72c83e0056ee5e33566172e22e1ee743417c5d3115d7f003a11ca2dd67db1d0b2ef8c83e9428b134489dcfcd6db", 0xb0, 0x8}], 0x0, &(0x7f0000000700)={[{@nojoliet='nojoliet'}, {@norock='norock'}, {@block={'block', 0x3d, 0x800}}, {@overriderock='overriderockperm'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'user_id'}}]}) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:34 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 900.885288] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 900.896511] EXT4-fs (loop0): group descriptors corrupted! [ 900.923416] EXT4-fs (loop2): inodes count not valid: 36569216 vs 128 06:54:34 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000004c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000400002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 901.092884] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 901.142975] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 901.162129] EXT4-fs (loop2): inodes count not valid: 1073741952 vs 128 [ 901.173675] ISOFS: Unable to identify CD-ROM format. [ 901.179480] EXT4-fs (loop0): group descriptors corrupted! 06:54:34 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000050002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:34 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034293030302c757365725f694e3df860b138c5647b47a7571cdfd59502968ae215e391425001d02e7fcee375ea92e127643619f143143915d5c76527df8770ba1301b0a8f832659fbd20f994dcc11f66c45c6858c095f02a5f0ce286e18d8582d1ab1a71165cd3981b598d06d402d6a64224", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 901.363566] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 901.392762] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 901.402359] EXT4-fs (loop2): inodes count not valid: 83886208 vs 128 06:54:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:34 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000780)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) r2 = getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r3 = getgid() r4 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000700)={0xfffffffffffffff8, "4c9c9d32fa14545fe17bf4c452484d175408569c563238870e07d3d1e3d57533", 0x2, 0x4860000000000000, 0x4, 0xe0, 0x202, 0x2}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r5, &(0x7f0000000380)={0x78, 0x0, 0x5, {0x8, 0x9, 0x0, {0x4, 0x81, 0x1, 0x4, 0x3ff, 0x4, 0x4, 0xa200000000000, 0x7, 0x9, 0x5, r2, r3, 0xffff, 0x3}}}, 0x78) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 901.441325] EXT4-fs (loop0): group descriptors corrupted! 06:54:34 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000fc000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 901.695388] EXT4-fs (loop2): inodes count not valid: 16515200 vs 128 06:54:35 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0x404100, 0x91) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000440)={@in={0x2, 0x4e21, @local}, {&(0x7f00000000c0)=""/29, 0x1d}, &(0x7f0000000180), 0x21}, 0xa0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800007000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:35 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800004020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 901.918875] ISOFS: Unable to identify CD-ROM format. [ 901.968403] EXT4-fs (loop0): inodes count not valid: 33816704 vs 128 [ 902.003606] EXT4-fs (loop2): inodes count not valid: 458880 vs 128 [ 902.025788] EXT4-fs (loop0): inodes count not valid: 33816704 vs 128 06:54:35 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 902.066744] EXT4-fs (loop2): inodes count not valid: 458880 vs 128 06:54:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000016802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000007a0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000004802000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 902.206084] EXT4-fs (loop0): inodes count not valid: 16777344 vs 128 [ 902.233485] EXT4-fs (loop2): inodes count not valid: 2046820480 vs 128 06:54:35 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 902.326135] EXT4-fs (loop2): inodes count not valid: 2046820480 vs 128 [ 902.415267] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 902.461178] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 902.471312] EXT4-fs (loop0): group descriptors corrupted! 06:54:35 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000800)=""/142) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000780)={0xffffffffffffffd8, 0x0, 0x1, {0x7, 0x1b, 0x8003, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0xfffffffffffffffc}}, 0xfffffffffffffe62) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f00000000c0)={0x6, 0x8, [0x4, 0x7]}) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:35 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:35 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 902.605025] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 902.632825] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 902.663052] EXT4-fs (loop0): group descriptors corrupted! 06:54:36 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getgid() getuid() r3 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x20000000, 0x2) socketpair(0xa, 0x6, 0xffff, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x3, "71c377"}, &(0x7f0000000440)=0xb) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r4, &(0x7f00000004c0)=0x4) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) socket$l2tp(0x18, 0x1, 0x1) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) readahead(r1, 0x7, 0x3) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid'}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000fff0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="802e02000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:36 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:36 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 903.028346] EXT4-fs (loop2): inodes count not valid: 4279173248 vs 128 [ 903.042238] EXT4-fs (loop0): inodes count not valid: 142976 vs 128 06:54:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000006002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:36 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000009000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:36 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 903.243959] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.269405] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.307753] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 903.320929] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 903.363590] EXT4-fs (loop2): group descriptors corrupted! [ 903.371531] EXT4-fs (loop0): group descriptors corrupted! [ 903.413279] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.425775] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 903.432678] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.449467] EXT4-fs (loop0): group descriptors corrupted! [ 903.479502] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 903.495864] EXT4-fs (loop2): group descriptors corrupted! 06:54:36 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, &(0x7f0000000a80)=""/157, 0x9d, 0x20, &(0x7f0000000b40)={0x2, 0x4e23, @broadcast}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:36 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:36 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800048000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000040000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:36 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:36 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 903.706025] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.716088] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 903.730684] EXT4-fs (loop0): inodes count not valid: 4718720 vs 128 [ 903.751046] EXT4-fs (loop2): group descriptors corrupted! 06:54:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000020400000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 903.788789] EXT4-fs (loop0): inodes count not valid: 4718720 vs 128 06:54:37 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f4ffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:37 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 903.942193] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (4) [ 904.034037] EXT4-fs (loop0): inodes count not valid: 4294964352 vs 128 [ 904.055885] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (4) 06:54:37 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) r5 = dup2(r0, r0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x1, 0x4) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:37 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d67269c581d8f9664987375b045aba4b45770ae1a8dfb7a4cbbe01f4e7c3e2d88517b1938a437800816a448932abac85a6eb8961a9e7e6fa56028085b102fa30af30c8f8c21614da5309f4d767637f9c8dc0d029b364678b0d0e5b246dac731432bbfcacce0a8cdef437b392c73f2cc57ece914f27e035b6bd3d05e8e98f14c6b5bb0ece0e17bff0a0f49341555f9ddc1129a1aaf634a98f83fe4dc90a5985dbc23ca57c202fc171cfe7df14badba0178464f4912dea2eb", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() r2 = dup2(r0, r0) r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000700)=""/136) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x100, 0x7) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r4 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f0000002000), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fc00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:37 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800023000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:37 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 904.514182] EXT4-fs (loop2): inodes count not valid: 2293888 vs 128 [ 904.526013] EXT4-fs (loop0): inodes count not valid: 64640 vs 128 06:54:37 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 904.590097] EXT4-fs (loop0): inodes count not valid: 64640 vs 128 06:54:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80004c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffffe02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:38 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:38 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 904.775315] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 [ 904.805307] EXT4-fs (loop2): inodes count not valid: 4980864 vs 128 06:54:38 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:38 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000440)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800c00000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000090002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:38 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 905.171441] EXT4-fs (loop0): inodes count not valid: 3200 vs 128 [ 905.192687] EXT4-fs (loop2): inodes count not valid: 150995072 vs 128 06:54:38 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800500000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 905.229593] EXT4-fs (loop0): inodes count not valid: 3200 vs 128 [ 905.267982] EXT4-fs (loop2): inodes count not valid: 150995072 vs 128 06:54:38 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000c00000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:38 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 905.413764] EXT4-fs (loop0): inodes count not valid: 1408 vs 128 [ 905.457825] EXT4-fs (loop0): inodes count not valid: 1408 vs 128 [ 905.484355] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (12) [ 905.589868] EXT4-fs (loop2): bad geometry: first data block 252 is beyond end of filesystem (12) 06:54:38 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000202000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 905.705093] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 905.714314] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 905.725546] EXT4-fs (loop0): group descriptors corrupted! 06:54:39 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:39 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x41010, r4, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000407fe000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:39 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c83726f75705f63713e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ppoll(&(0x7f0000000380)=[{r0, 0xc620}], 0x1, &(0x7f0000000700), &(0x7f0000000740)={0x1}, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x5, 0x200000000000001}) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000002d02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:39 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 906.219846] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 906.248666] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 906.268910] EXT4-fs (loop2): inodes count not valid: 67108992 vs 512 [ 906.272820] EXT4-fs (loop0): group descriptors corrupted! 06:54:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000d8030002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000020002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:39 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:39 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x80) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0xffff, 0x2, 0x0, &(0x7f0000ff2000/0xb000)=nil, 0x6}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 906.469406] EXT4-fs (loop0): inodes count not valid: 33554560 vs 128 [ 906.487421] EXT4-fs (loop2): inodes count not valid: 64487552 vs 128 06:54:39 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000700)=""/191) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000902000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:39 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 906.689624] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 906.700592] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 906.735902] EXT4-fs (loop0): group descriptors corrupted! [ 906.774836] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 906.784647] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 906.794187] EXT4-fs (loop0): group descriptors corrupted! 06:54:40 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800079010002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800040000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:40 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x680680, 0xa1) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000180)={0x1, 0x2, 0xfffffffffffffff7, 0x5c}) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f00000004c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x5}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000002000)={"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"}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:40 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) prctl$seccomp(0x16, 0x1, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x7, 0x10001, 0xfffffffffffffffd, 0x101}]}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180), &(0x7f0000000380)=0x4) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 907.192066] EXT4-fs (loop0): inodes count not valid: 4194432 vs 128 [ 907.216526] EXT4-fs (loop2): inodes count not valid: 24707200 vs 128 06:54:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80f6ffffff02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 907.246421] EXT4-fs (loop0): inodes count not valid: 4194432 vs 128 [ 907.261112] audit: type=1326 audit(1540968880.448:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13528 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 06:54:40 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 907.385653] EXT4-fs (loop2): inodes count not valid: 24707200 vs 128 [ 907.406308] EXT4-fs (loop0): inodes count not valid: 4294964864 vs 128 06:54:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000000a0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:40 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:40 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800002040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 907.620394] EXT4-fs (loop2): inodes count not valid: 167772288 vs 128 06:54:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800009000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:40 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 907.664604] EXT4-fs (loop0): inodes count not valid: 67240064 vs 128 [ 907.774350] EXT4-fs (loop0): inodes count not valid: 67240064 vs 128 [ 907.788176] EXT4-fs (loop2): inodes count not valid: 589952 vs 128 [ 907.995904] audit: type=1326 audit(1540968881.188:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13528 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 06:54:43 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e24, @loopback}}) 06:54:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000007000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:43 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000007c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x2030, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='.\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) getegid() r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x601d}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={r5, 0x80000001}, 0x8) read$FUSE(r2, &(0x7f00000030c0), 0x1000) bind$unix(r0, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(r4, &(0x7f0000002000), 0x1000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x2, 0x1}, 0x50) sendfile(r0, r1, &(0x7f0000000380), 0x76c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000800)=0x80000001, 0x4) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f643d30301c30303030303030303030303030303134303030302c757365725f697c3d00", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x0000000000000e86,audit,subj_role=blksize,smackfstransmute=system.posix_acl_default\x00,subj_user=system.posix_acl_default\x00,\x00']) 06:54:43 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 910.406928] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 910.423345] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 910.451265] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 910.473938] EXT4-fs (loop2): group descriptors corrupted! [ 910.490114] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800003000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 910.522745] EXT4-fs (loop0): group descriptors corrupted! 06:54:43 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 910.635734] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:43 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x800) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xf93e) 06:54:43 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x190) r1 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000440)={{0x0, 0x6, 0x1, 0x7, '\x00', 0xfffffffffffffff7}, 0x2, 0x20000000, 0xffffffff, r1, 0x3, 0x100, 'syz1\x00', &(0x7f0000000380)=['\x00', 'system%!vmnet0)-}trustedkeyringkeyringem0keyring5\x00', '{^vboxnet0cgroup\x00'], 0x44, [], [0xd543, 0x1ff, 0xc7d, 0x2]}) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) r6 = getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r8}, 0x341) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r3, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='fuseblk\x00', 0x4020, &(0x7f0000000700)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}]}}) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r7}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 910.680388] EXT4-fs (loop2): inodes count not valid: 196736 vs 128 [ 910.693517] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 910.718538] EXT4-fs (loop0): group descriptors corrupted! 06:54:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000006c02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 910.786309] EXT4-fs (loop2): inodes count not valid: 196736 vs 128 06:54:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000060002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:44 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000700)={0x80000000, 0x1, "941ea44f56b5b7e83df6006db8d8b10eb2186dfb8d870f8ce2ce72e697351382", 0x9, 0x6d, 0x4, 0x8, 0x8000, 0xfffffffffffffff8, 0xbe7, 0x80, [0x2, 0x100, 0x80000001, 0x3f]}) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:44 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:44 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000ff, 0x0) syz_open_pts(r0, 0x301001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r2, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r3, @ANYBLOB="360bd05aa860cdc2f57e", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000e86,audit,fscontext=staff_u,uid=', @ANYRESDEC=r4, @ANYBLOB=',subj_role=blksize,smackfstransmute=system.posix_acl_default\x00,subj_user=system.posix_acl_default\x00,\x00']) [ 910.953276] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 910.980416] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 910.992822] EXT4-fs (loop0): group descriptors corrupted! 06:54:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000402000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 911.031769] EXT4-fs (loop2): inodes count not valid: 100663424 vs 128 06:54:44 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x0, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 911.155668] EXT4-fs (loop2): inodes count not valid: 100663424 vs 128 06:54:44 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 911.198640] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000600002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 911.261181] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:44 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x0, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 911.313500] EXT4-fs (loop0): group descriptors corrupted! [ 911.367691] EXT4-fs (loop2): inodes count not valid: 1610612864 vs 128 [ 911.396674] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:44 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x0, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:44 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 911.411390] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 911.431858] EXT4-fs (loop0): group descriptors corrupted! 06:54:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80022e000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:44 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 911.517166] EXT4-fs (loop2): inodes count not valid: 1610612864 vs 128 [ 911.677762] EXT4-fs (loop0): inodes count not valid: 3015296 vs 128 06:54:45 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz1', "7d22e3381b7d7a64843cda6274b2dfff567bc27b647c23ca063e30c5540d3a809169143011475e898acc664f6520e11e0c516124f64b6fc592380c17ac103523838ab846695aa2399900e76766220c0a6907be936e8bbe7c97ef880f26a60cfda4e10837c7bf3ccbde4dafd539aa2cea7471b26f42b51dddf35103a36caca56457803d48fe34fdabc76f0cfeb597175bbd61b3c165e7aaa92936d970f03f0dc7d4a27f85335b07fc802cf35115b311f4bd8094f3a42ce02fe091bfbb9297c64fa5238761ae4d4b2ee10dcd7f0367d1e0837d5554c8483dcad704ba88cba1e2fe85f189e87bf9d62293ab4cbb728718732367ed8fa91fa5ef8c"}, 0xfd) ioctl$TCSBRK(r0, 0x5409, 0x800) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000f1800002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 911.838291] EXT4-fs (loop2): inodes count not valid: 2163277952 vs 128 06:54:45 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r1, 0x80000) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) get_robust_list(r2, &(0x7f0000000440)=&(0x7f00000003c0)={&(0x7f00000000c0), 0x0, &(0x7f0000000380)={&(0x7f0000000180)}}, &(0x7f0000000480)=0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) getsockopt$inet_dccp_int(r5, 0x21, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:45 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80fffffffb02000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 912.016295] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 06:54:45 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800074000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:45 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 912.088306] EXT4-fs (loop0): inodes count not valid: 4294967168 vs 128 [ 912.148752] EXT4-fs (loop2): inodes count not valid: 7602304 vs 128 06:54:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000302000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:45 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000a000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 912.302306] EXT4-fs (loop2): inodes count not valid: 655488 vs 128 [ 912.337620] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 06:54:45 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 912.361446] EXT4-fs (loop2): inodes count not valid: 655488 vs 128 [ 912.390265] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 912.407758] EXT4-fs (loop0): group descriptors corrupted! [ 912.475447] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 912.484935] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 912.494949] EXT4-fs (loop0): group descriptors corrupted! 06:54:45 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c626f6f743030303030a9925a03db6b46c9177734303030302c757365725f69643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00') stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80002d000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 912.787025] EXT4-fs (loop2): inodes count not valid: 2949248 vs 128 [ 912.830076] EXT4-fs (loop2): inodes count not valid: 2949248 vs 128 06:54:46 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:46 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000002002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:46 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000387000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:46 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() fsync(r0) r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 913.039493] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 913.088383] EXT4-fs (loop2): inodes count not valid: 128 vs 384 [ 913.103511] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:46 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000006000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 913.173046] EXT4-fs (loop0): group descriptors corrupted! [ 913.250839] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 913.278319] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 913.307849] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 913.340447] EXT4-fs (loop0): group descriptors corrupted! 06:54:46 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 913.354929] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 913.381435] EXT4-fs (loop2): group descriptors corrupted! 06:54:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000041002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:46 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 913.519904] EXT4-fs (loop0): inodes count not valid: 67108992 vs 128 [ 913.531850] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 913.542431] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000f0000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 913.592328] EXT4-fs (loop2): group descriptors corrupted! [ 913.605091] EXT4-fs (loop0): inodes count not valid: 67108992 vs 128 [ 913.773673] EXT4-fs (loop0): inodes count not valid: 15728768 vs 128 [ 913.822981] EXT4-fs (loop0): inodes count not valid: 15728768 vs 128 06:54:47 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x103) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x36cfffe, 0x100000000018000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x5d, "d4cc18738fe0ffe5ee73b4330f57e29c439f79604e8c6eb5ccb5185fa2d1d84fb6881e2c0378557a9fd1b83280692cb0cc0a153afed3c1491b7ba8ec40b1f8a6a2da4d6415a30df4cbba2f32d95cc410f2f744512bd97416a1cf928a50"}, &(0x7f00000004c0)=0x65) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r2, 0x8328}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)=0x3ff, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r3, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r3, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000e86,audit,fscontext=staff_u,uid=', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f726f6c653d626c6b73697a652c736d61636b66737472616e736d7574653d73797374656d2e706f7369785f61636c5f64656661756c74002c7375626a5f757365723d73797374656d2e706f7369785f61636c5f64656661756c74002c00da4f7392645d66629138995bd0e7ab62d6fcdd9c28741688d80b5dee8d59246ebc925bc220c95f7cf700fe07"]) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x7fffffff}}, 0x18) 06:54:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000002e000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:47 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}]}}) 06:54:47 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000000, 0x381000) signalfd4(r3, &(0x7f0000000180)={0xfffffffffffff189}, 0x8, 0x800) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800900000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:47 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000180), 0x4000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 914.108455] EXT4-fs (loop0): inodes count not valid: 2432 vs 128 [ 914.163025] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 914.196301] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:47 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10880, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000700)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) uname(&(0x7f00000000c0)=""/50) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000800)={0x57, 0x7, 0x7, {0x7ff, 0x1000}, {0x0, 0x2}, @period={0x59, 0x9, 0x8, 0x4, 0xdd8, {0x8, 0x4, 0x8, 0xd4d}, 0x1, &(0x7f0000000380)=[0x7]}}) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) ioctl$KDENABIO(r5, 0x4b36) 06:54:47 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}]}}) [ 914.214045] EXT4-fs (loop0): inodes count not valid: 2432 vs 128 [ 914.233082] EXT4-fs (loop2): group descriptors corrupted! 06:54:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800008040002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:47 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}]}}) 06:54:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000001000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) [ 914.415049] EXT4-fs (loop0): inodes count not valid: 67633280 vs 128 06:54:47 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 914.475304] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 914.487427] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 914.522112] EXT4-fs (loop0): inodes count not valid: 67633280 vs 128 [ 914.530827] EXT4-fs (loop2): group descriptors corrupted! 06:54:50 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000005c0)={0x5}) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x7) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x1000}}, [0x8, 0x8001, 0x0, 0x3f, 0x0, 0x6, 0x7, 0x3f, 0x2, 0x4, 0x8001, 0x2, 0x9, 0x6, 0x5ef]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000540)={r6, 0x3}, &(0x7f0000000580)=0x8) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000014000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000702000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:50 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:50 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) 06:54:50 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) socketpair(0x18, 0x80005, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r3, &(0x7f0000000700)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x800, 0x10000, 0x0, 0x25, 0x6, 0x40}}, 0x50) [ 917.331853] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 917.345406] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 917.355270] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 917.368289] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 06:54:50 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 917.424120] EXT4-fs (loop2): group descriptors corrupted! [ 917.427652] EXT4-fs (loop0): group descriptors corrupted! 06:54:50 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000700)={0x8, 0x5, [{0x5, 0x0, 0xfffffffffffffff7}, {0xfffffffffffffffb, 0x0, 0x6d5}, {0x74e, 0x0, 0x3e6}, {0xfffffffffffffffb, 0x0, 0xd4}, {0x3, 0x0, 0x6}, {0x400, 0x0, 0xfffffffffffffffd}, {0xffffffff, 0x0, 0x7}, {0x8001, 0x0, 0x7b}]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r3 = getegid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 917.537150] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 917.555442] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 917.566965] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 917.608101] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 917.618616] EXT4-fs (loop0): group descriptors corrupted! [ 917.629024] EXT4-fs (loop2): group descriptors corrupted! 06:54:50 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000022e0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800006000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:50 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) [ 917.870794] EXT4-fs (loop2): inodes count not valid: 771883136 vs 128 [ 917.895936] EXT4-fs (loop0): inodes count not valid: 393344 vs 128 [ 917.939915] EXT4-fs (loop0): inodes count not valid: 393344 vs 128 [ 917.955104] EXT4-fs (loop2): inodes count not valid: 771883136 vs 128 06:54:51 executing program 1: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:51 executing program 4: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x0, 0x100d}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000680)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}]}}) 06:54:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800001790002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80025b000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:51 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 918.372931] EXT4-fs (loop2): inodes count not valid: 2030108800 vs 128 [ 918.409255] EXT4-fs (loop0): inodes count not valid: 5964416 vs 128 06:54:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000004c0002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:51 executing program 5: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) shutdown(r0, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x100000001}}, 0x50) [ 918.535606] EXT4-fs (loop0): inodes count not valid: 5964416 vs 128 [ 918.586965] EXT4-fs (loop2): inodes count not valid: 1275068544 vs 128 06:54:51 executing program 3: socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) getuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getgid() r2 = semget$private(0x0, 0x0, 0x682) semop(r2, &(0x7f0000000180)=[{0x4, 0x9, 0x1000}, {0x4, 0x1, 0x800}], 0x2) r3 = getegid() utime(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x102d) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00'}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1004, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe86}}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'blksize'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}]}}) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0x0, 0xff, 0xd34, 0x5}) 06:54:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000100)=0x60000000, 0x8010) 06:54:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80000000003d000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="80007c000002000019000400e67526006cfffffdfc0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1014001, &(0x7f0000000440)=ANY=[]) 06:54:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000002dcd8)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009100e80000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80049030000000000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000736e6d7000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) [ 918.737696] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 918.747898] EXT4-fs (loop0): inodes count not valid: 8126592 vs 128 [ 918.754633] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 918.798799] EXT4-fs (loop2): group descriptors corrupted! [ 918.813795] EXT4-fs (loop0): inodes count not valid: 8126592 vs 128 [ 919.062113] WARNING: CPU: 0 PID: 14124 at fs/fuse/dev.c:390 request_end+0x82e/0xaa0 [ 919.069983] Kernel panic - not syncing: panic_on_warn set ... [ 919.069983] [ 919.077350] CPU: 0 PID: 14124 Comm: syz-executor3 Not tainted 4.19.0+ #89 [ 919.084288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.093638] Call Trace: [ 919.096213] dump_stack+0x244/0x39d [ 919.099833] ? dump_stack_print_info.cold.1+0x20/0x20 [ 919.105030] panic+0x238/0x4e7 [ 919.108231] ? add_taint.cold.5+0x16/0x16 [ 919.112378] ? __warn.cold.8+0x5/0x4a [ 919.116169] ? request_end+0x82e/0xaa0 [ 919.120057] __warn.cold.8+0x20/0x4a [ 919.123775] ? rcu_softirq_qs+0x20/0x20 [ 919.127784] ? request_end+0x82e/0xaa0 [ 919.131696] report_bug+0x254/0x2d0 [ 919.135340] do_error_trap+0x11b/0x200 [ 919.139229] do_invalid_op+0x36/0x40 [ 919.142931] ? request_end+0x82e/0xaa0 [ 919.146825] invalid_op+0x14/0x20 [ 919.150270] RIP: 0010:request_end+0x82e/0xaa0 [ 919.154762] Code: 3c 03 0f 8f 6f fe ff ff 48 8b bd f0 fe ff ff e8 58 c8 39 ff e9 5e fe ff ff e8 4e 85 f6 fe 0f 0b e9 b0 fa ff ff e8 42 85 f6 fe <0f> 0b e9 f0 fa ff ff e8 f6 fa bf fe e8 51 c8 39 ff e9 5b fb ff ff [ 919.173656] RSP: 0018:ffff8801768a7378 EFLAGS: 00010212 [ 919.179007] RAX: 0000000000040000 RBX: ffff8801bbe3f200 RCX: ffffc90008da1000 [ 919.186260] RDX: 000000000000010f RSI: ffffffff8288f23e RDI: 0000000000000007 [ 919.193530] RBP: ffff8801768a74a8 R08: ffff8801c715e480 R09: ffffed003750236f [ 919.198283] kobject: '0:63' (00000000b2779de5): kobject_add_internal: parent: 'bdi', set: 'devices' [ 919.200792] R10: ffffed003750236f R11: ffff8801ba811b7b R12: 1ffff1002ed14e74 [ 919.200808] R13: ffff8801ba811b00 R14: ffff8801bbe3f230 R15: ffff8801768a7480 [ 919.210566] kobject: '0:63' (00000000b2779de5): kobject_uevent_env [ 919.217265] ? request_end+0x82e/0xaa0 [ 919.217286] ? request_end+0x82e/0xaa0 [ 919.217301] ? fuse_dev_do_write+0x1913/0x36c0 [ 919.217321] ? fuse_get_req_for_background+0x30/0x30 [ 919.217344] ? kasan_check_read+0x11/0x20 [ 919.217360] ? do_raw_spin_unlock+0xa7/0x330 [ 919.217378] ? do_raw_spin_trylock+0x270/0x270 [ 919.229550] kobject: '0:63' (00000000b2779de5): fill_kobj_path: path = '/devices/virtual/bdi/0:63' [ 919.230968] fuse_dev_do_write+0x1920/0x36c0 [ 919.230984] ? futex_wait_queue_me+0x55d/0x840 [ 919.231014] ? fuse_dev_read+0x250/0x250 [ 919.231035] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 919.288574] ? futex_wait_setup+0x266/0x3e0 [ 919.292889] ? mark_held_locks+0x130/0x130 [ 919.297115] ? futex_wake+0x760/0x760 [ 919.300918] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 919.306114] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 919.311218] ? futex_wait+0x5ec/0xa50 [ 919.315030] ? print_usage_bug+0xc0/0xc0 [ 919.319101] ? print_usage_bug+0xc0/0xc0 [ 919.323154] ? futex_wait_setup+0x3e0/0x3e0 [ 919.327461] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 919.332652] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 919.337760] ? futex_wake+0x304/0x760 [ 919.341567] ? zap_class+0x640/0x640 [ 919.345270] ? __lock_acquire+0x62f/0x4c20 [ 919.349514] ? find_held_lock+0x36/0x1c0 [ 919.353585] ? __fget+0x4aa/0x740 [ 919.357040] ? lock_downgrade+0x900/0x900 [ 919.361180] ? check_preemption_disabled+0x48/0x280 [ 919.366184] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 919.371108] ? kasan_check_read+0x11/0x20 [ 919.375268] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 919.380547] ? rcu_softirq_qs+0x20/0x20 [ 919.384512] ? __fget+0x4d1/0x740 [ 919.387952] ? memset+0x31/0x40 [ 919.391223] fuse_dev_write+0x19a/0x240 [ 919.395186] ? fuse_dev_splice_write+0xe70/0xe70 [ 919.399941] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 919.405478] ? iov_iter_init+0xc2/0x1e0 [ 919.409451] __vfs_write+0x6b8/0x9f0 [ 919.413155] ? kernel_read+0x120/0x120 [ 919.417029] ? lock_release+0xa00/0xa00 [ 919.420990] ? trace_hardirqs_off_caller+0x310/0x310 [ 919.426080] ? putname+0xf7/0x130 [ 919.429531] ? rw_verify_area+0x118/0x360 [ 919.433664] vfs_write+0x1fc/0x560 [ 919.437207] ksys_write+0x101/0x260 [ 919.440834] ? __ia32_sys_read+0xb0/0xb0 [ 919.444881] ? trace_hardirqs_off_caller+0x310/0x310 [ 919.449976] __x64_sys_write+0x73/0xb0 [ 919.453855] do_syscall_64+0x1b9/0x820 [ 919.457750] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 919.463101] ? syscall_return_slowpath+0x5e0/0x5e0 [ 919.468020] ? trace_hardirqs_on_caller+0x310/0x310 [ 919.473023] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 919.478046] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 919.484721] ? __switch_to_asm+0x40/0x70 [ 919.488788] ? __switch_to_asm+0x34/0x70 [ 919.492850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 919.497765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.502942] RIP: 0033:0x457569 [ 919.506123] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.525016] RSP: 002b:00007f5127484c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 919.532725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 919.539995] RDX: 0000000000000078 RSI: 0000000020000680 RDI: 0000000000000005 [ 919.547263] RBP: 000000000072c180 R08: 0000000000000000 R09: 0000000000000000 [ 919.554523] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51274856d4 [ 919.561793] R13: 00000000004c51f0 R14: 00000000004d8ab8 R15: 00000000ffffffff [ 919.570104] Kernel Offset: disabled [ 919.573950] Rebooting in 86400 seconds..