CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2000000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x496f}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}]}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x302, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_USERDATA={0x13, 0xc, "b1b218bf7d6083b11676c23fdcb4dd"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x65, 0xc, "24e398033a0627b2bbeae5826c8aea67c392998e3779c61490ad7106b66ce7fdc3a58d17dad1873ea4ef0bbb4f2cd4e973687358d97819c71ab2ef99fa89ab17dbfe0a003ad1bc5274203bd04cbfbb4a97a77ae8016d2850aa438f665ebfb966f3"}]}], {0x14}}, 0xda0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

[ 1530.161453][T31141] loop3: detected capacity change from 0 to 264192
[ 1530.177386][T31139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:24 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000262000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1530.207342][T31144] loop4: detected capacity change from 0 to 140
[ 1530.230683][T31144] EXT4-fs (loop4): invalid inodes per group: 2415919136
[ 1530.230683][T31144] 
[ 1530.234232][T31149] loop2: detected capacity change from 0 to 264192
[ 1530.240389][T31141] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
04:27:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000e0100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:24 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x760, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x72c, 0x3, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "1349be6a3247d543569825b3be3b09e2f037a2288305e1f8465aa28aff7940ea5105d6811823899936cdd19411b106b7660e10a9906160391805c28ed8719fe7624fc76cfdb2a0e453983885440a40f5213d920c2359101d64154985cb736e237b60494802751a97ac"}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "a4037ce42b039303ba6962f0"}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf0}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3f}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "912ded3424582784ef5ca2787e00ef4935d10952ee3cca3091c148e920438d3a72b5ebc605f859b3d646f8ed117b4bd3d3b2c7058e530101f6f45b4dfe3bb54d397514f86b95346d033d14997957da153087629a5f49de5f1950f112a9caa7439e60f1932e2bacef31ac73b2bedb681635efe6a95e208a71425045ba1c249f6645bb1ae1392862377f293899e647f08104fc541a3e284481ea7b8aa73c1bc9a5b6937b"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000}]}]}]}, {0x2f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x2e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "a771fa8bdb9942e907c7f8a3e1ba303bbb4f2441794294f334ac39293ea95c97a322f0af1d21b8c95c7d1aad726637fb3562d9978b40b96840f9adbeceb63d9a8137dc28f1346b1ed5d34cf3b256942983191a7df584cb0d4a5fea7bcb5f79a5defd649e4db27e1969eea12749fcae104a5cccf1d56642022c87a9a1e6b46bbeb9128bbc9116d424eee2a85e0a25bf6ad374b86bdc66175c768a07c7bfe5b50d8e3b132cf20248"}, @NFTA_DATA_VALUE={0xf4, 0x1, "c166ca8abfbb0ee38a4a011e58c493f1598aead3a839a6d6256163dcd730b111f0ce53eacd5734f62cedf1d3e30e0208f1be9c2ef0f84934850e1997f95dc55701cec89c1fa4447b9e24a1299ed44cc05c72ef75894c28613c0ba2a0eec05d969e35bf44f9069a5be7517043538fa57c415f45ba47b3bd77f0810eda3c44193889cc51c3dc8394c1534a0aaa7f71562d0da27b51d1ab921239f788c29cb6e143c645378b373d4b608c6191c7e063e281e10f310065da307a06cb6e9e774c1fa02486fd953aa0dd1c4ea2c84f3af7f31586c6dfa20ca5b51218f47c75e1736fa7de0e1e94ff0b78ce0d61a8f7a0a9aded"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "8efdef3b3054f51b5728922f7c768f1e944e78037f4550b218aa4b809668c957bd1947fcf86815758656db0f52b9795e50adcc2ba413"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x424}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VALUE={0x84, 0x1, "3d4ef28a3be46c6b21d3256deda886c218e5a2756958bf84449db11dca8025a654730ef9ff1bd8a18bc8fdbb2a1f85eabdfed417ff4569e86a5a4d82fc427ca331f6cb813575239f4126e47990567028fcac392b377c44945b048187a9d97b46c689342466c481686a5facf9f721756a9d5f2363464c09abc983ba4bea23afcc"}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x305}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4a4, 0x3, 0x0, 0x1, [{0x4a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x49c, 0xb, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x390, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x384, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1ac, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "7e06a319ac1148dfc17eb7c01577fdc9d3cded0eb66aed5344d22b04e3076c1b05c793bc88880ecbf318df26153d13b3880fb4acc0cc55a3c3de10a0088ee5aa8e32c15287eb01ecb28043fdc150"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4a8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffc1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000007}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_DATA={0x1d4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9d7}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "f2c844ba921479356e63c95d436a4f8d3c448d5e868012d659d4bcb918eac925817d952ef09dd1102de8041af569ebefa4eb6c0196c1efe3a661fc0247979167d25b7925cfadc297242904c53c9d567bf57d0834549142e735da30a3b73d1f52dd7a3f0ce0ec274072aba8abd83eb7340b179ea9c0bf32ef688fd44d13ec9a911f8e59b0ff54c8176d2ec991993cc47fe8dd7e2655d8a614ca79516449fe6530174ec1d04cc68d73369d701bdb0edab33d37c89e074c36de1e251d1733e8efd9a22fa07683df9818f816a2093c387b39662365465fa3b3bb1b4257e6994d12a2f63aeca99b8d742622c60044ffaf7f2b4880a3fe8d71"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2000000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x496f}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}]}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x302, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_USERDATA={0x13, 0xc, "b1b218bf7d6083b11676c23fdcb4dd"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x65, 0xc, "24e398033a0627b2bbeae5826c8aea67c392998e3779c61490ad7106b66ce7fdc3a58d17dad1873ea4ef0bbb4f2cd4e973687358d97819c71ab2ef99fa89ab17dbfe0a003ad1bc5274203bd04cbfbb4a97a77ae8016d2850aa438f665ebfb966f3"}]}], {0x14}}, 0xda0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

[ 1530.248575][T31150] loop1: detected capacity change from 0 to 264192
[ 1530.259997][T31141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1530.277047][T31149] EXT4-fs (loop2): #blocks per group too big: 8230
[ 1530.283681][T31150] EXT4-fs (loop1): Invalid log cluster size: 45569
04:27:24 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000059cd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1530.312215][T12943] EXT4-fs (loop3): unmounting filesystem.
[ 1530.328262][T31159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1530.335623][T31158] loop4: detected capacity change from 0 to 140
[ 1530.344494][T31161] loop3: detected capacity change from 0 to 264192
[ 1530.354505][T31158] EXT4-fs (loop4): invalid inodes per group: 2617573408
04:27:24 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x760, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x72c, 0x3, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "1349be6a3247d543569825b3be3b09e2f037a2288305e1f8465aa28aff7940ea5105d6811823899936cdd19411b106b7660e10a9906160391805c28ed8719fe7624fc76cfdb2a0e453983885440a40f5213d920c2359101d64154985cb736e237b60494802751a97ac"}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "a4037ce42b039303ba6962f0"}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf0}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3f}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "912ded3424582784ef5ca2787e00ef4935d10952ee3cca3091c148e920438d3a72b5ebc605f859b3d646f8ed117b4bd3d3b2c7058e530101f6f45b4dfe3bb54d397514f86b95346d033d14997957da153087629a5f49de5f1950f112a9caa7439e60f1932e2bacef31ac73b2bedb681635efe6a95e208a71425045ba1c249f6645bb1ae1392862377f293899e647f08104fc541a3e284481ea7b8aa73c1bc9a5b6937b"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000}]}]}]}, {0x2f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x2e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "a771fa8bdb9942e907c7f8a3e1ba303bbb4f2441794294f334ac39293ea95c97a322f0af1d21b8c95c7d1aad726637fb3562d9978b40b96840f9adbeceb63d9a8137dc28f1346b1ed5d34cf3b256942983191a7df584cb0d4a5fea7bcb5f79a5defd649e4db27e1969eea12749fcae104a5cccf1d56642022c87a9a1e6b46bbeb9128bbc9116d424eee2a85e0a25bf6ad374b86bdc66175c768a07c7bfe5b50d8e3b132cf20248"}, @NFTA_DATA_VALUE={0xf4, 0x1, "c166ca8abfbb0ee38a4a011e58c493f1598aead3a839a6d6256163dcd730b111f0ce53eacd5734f62cedf1d3e30e0208f1be9c2ef0f84934850e1997f95dc55701cec89c1fa4447b9e24a1299ed44cc05c72ef75894c28613c0ba2a0eec05d969e35bf44f9069a5be7517043538fa57c415f45ba47b3bd77f0810eda3c44193889cc51c3dc8394c1534a0aaa7f71562d0da27b51d1ab921239f788c29cb6e143c645378b373d4b608c6191c7e063e281e10f310065da307a06cb6e9e774c1fa02486fd953aa0dd1c4ea2c84f3af7f31586c6dfa20ca5b51218f47c75e1736fa7de0e1e94ff0b78ce0d61a8f7a0a9aded"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "8efdef3b3054f51b5728922f7c768f1e944e78037f4550b218aa4b809668c957bd1947fcf86815758656db0f52b9795e50adcc2ba413"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x424}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VALUE={0x84, 0x1, "3d4ef28a3be46c6b21d3256deda886c218e5a2756958bf84449db11dca8025a654730ef9ff1bd8a18bc8fdbb2a1f85eabdfed417ff4569e86a5a4d82fc427ca331f6cb813575239f4126e47990567028fcac392b377c44945b048187a9d97b46c689342466c481686a5facf9f721756a9d5f2363464c09abc983ba4bea23afcc"}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x305}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4a4, 0x3, 0x0, 0x1, [{0x4a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x49c, 0xb, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x390, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x384, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1ac, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "7e06a319ac1148dfc17eb7c01577fdc9d3cded0eb66aed5344d22b04e3076c1b05c793bc88880ecbf318df26153d13b3880fb4acc0cc55a3c3de10a0088ee5aa8e32c15287eb01ecb28043fdc150"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4a8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffc1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000007}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_DATA={0x1d4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x101}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9d7}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "f2c844ba921479356e63c95d436a4f8d3c448d5e868012d659d4bcb918eac925817d952ef09dd1102de8041af569ebefa4eb6c0196c1efe3a661fc0247979167d25b7925cfadc297242904c53c9d567bf57d0834549142e735da30a3b73d1f52dd7a3f0ce0ec274072aba8abd83eb7340b179ea9c0bf32ef688fd44d13ec9a911f8e59b0ff54c8176d2ec991993cc47fe8dd7e2655d8a614ca79516449fe6530174ec1d04cc68d73369d701bdb0edab33d37c89e074c36de1e251d1733e8efd9a22fa07683df9818f816a2093c387b39662365465fa3b3bb1b4257e6994d12a2f63aeca99b8d742622c60044ffaf7f2b4880a3fe8d71"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2000000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x496f}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}]}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x302, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_USERDATA={0x13, 0xc, "b1b218bf7d6083b11676c23fdcb4dd"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x65, 0xc, "24e398033a0627b2bbeae5826c8aea67c392998e3779c61490ad7106b66ce7fdc3a58d17dad1873ea4ef0bbb4f2cd4e973687358d97819c71ab2ef99fa89ab17dbfe0a003ad1bc5274203bd04cbfbb4a97a77ae8016d2850aa438f665ebfb966f3"}]}], {0x14}}, 0xda0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

[ 1530.354505][T31158] 
04:27:24 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000002b20000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000100100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:24 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000012c2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:24 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f0000000100000000000000000000000020000000200002200001aad7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1530.390380][T31161] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[ 1530.400146][T31161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1530.422095][T12943] EXT4-fs (loop3): unmounting filesystem.
04:27:24 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xfffffffffffffecc, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1530.435530][T31169] loop1: detected capacity change from 0 to 264192
[ 1530.460565][T31175] loop4: detected capacity change from 0 to 140
[ 1530.472273][T31174] loop2: detected capacity change from 0 to 264192
[ 1530.474243][T31179] loop3: detected capacity change from 0 to 264192
04:27:24 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xfffffffffffffecc, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xfffffffffffffecc, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)

[ 1530.479438][T31178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1530.495960][T31169] EXT4-fs (loop1): Invalid log cluster size: 45570
[ 1530.504507][T31179] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[ 1530.517000][T31179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1530.526531][T31174] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1530.533879][T31175] EXT4-fs (loop4): invalid inodes per group: 2852192288
04:27:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x5}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:24 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000110100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:24 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xfffffffffffffecc, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:24 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000001b70000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:24 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000412c2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:24 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f0000000100000000000000000000000020000000200002200005c2d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1530.533879][T31175] 
[ 1530.559559][T31187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1530.571853][T12943] EXT4-fs (loop3): unmounting filesystem.
04:27:25 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf77e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8f}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

[ 1530.628422][T31194] loop1: detected capacity change from 0 to 264192
[ 1530.635423][T31195] loop2: detected capacity change from 0 to 264192
[ 1530.637632][T31192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1530.655251][T31195] EXT4-fs (loop2): Invalid log cluster size: 1090519040
[ 1530.664698][T31197] loop4: detected capacity change from 0 to 140
04:27:25 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf77e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8f}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf77e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8f}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)

04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x7}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000120100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1530.674144][T31194] EXT4-fs (loop1): Invalid log cluster size: 46849
[ 1530.681882][T31197] EXT4-fs (loop4): invalid inodes per group: 3255107616
[ 1530.681882][T31197] 
[ 1530.682976][T31201] loop3: detected capacity change from 0 to 264192
[ 1530.701780][T31201] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[ 1530.711769][T31201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000412d2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000fffed7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000ca0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1530.749436][T31208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1530.784647][T12943] EXT4-fs (loop3): unmounting filesystem.
[ 1530.784960][T31212] loop2: detected capacity change from 0 to 264192
[ 1530.799609][T31214] loop1: detected capacity change from 0 to 264192
[ 1530.803393][T31211] loop4: detected capacity change from 0 to 140
[ 1530.806269][T24855] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1530.821530][T24855] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1530.823216][T31214] EXT4-fs (loop1): Invalid log cluster size: 51712
04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:25 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async, rerun: 64)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf77e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8f}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000412e2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1530.861043][T31226] loop3: detected capacity change from 0 to 264192
[ 1530.864053][T31211] EXT4-fs (loop4): invalid inodes per group: 4278124576
[ 1530.864053][T31211] 
[ 1530.883177][T31228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1530.892629][T31212] EXT4-fs (loop2): Invalid log cluster size: 1090519040
04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x693052fd4b8e27ce, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

04:27:25 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000002ece0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:25 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000fffd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x9}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1530.950601][T31226] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[ 1530.975194][T31241] loop2: detected capacity change from 0 to 264192
[ 1530.979113][T31244] loop4: detected capacity change from 0 to 140
[ 1530.990835][T31245] loop1: detected capacity change from 0 to 264192
04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x693052fd4b8e27ce, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x693052fd4b8e27ce, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)

04:27:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000003f0100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1531.002121][T31241] EXT4-fs (loop2): Invalid log cluster size: 1090519040
[ 1531.015466][T31244] EXT4-fs (loop4): invalid inodes per group: 4279173152
[ 1531.015466][T31244] 
[ 1531.017240][T31226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1531.037450][T31245] EXT4-fs (loop1): Invalid log cluster size: 52782
04:27:25 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000feffd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x693052fd4b8e27ce, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000322000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.058781][T12943] EXT4-fs (loop3): unmounting filesystem.
04:27:25 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000002ed00000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1531.112288][T31265] loop3: detected capacity change from 0 to 264192
[ 1531.120971][T31267] loop2: detected capacity change from 0 to 264192
[ 1531.129197][T31259] loop4: detected capacity change from 0 to 140
[ 1531.131441][T31270] loop1: detected capacity change from 0 to 264192
[ 1531.144230][T31270] EXT4-fs (loop1): Invalid log cluster size: 53294
[ 1531.151070][T31267] EXT4-fs (loop2): #blocks per group too big: 8242
04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x774, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x724, 0x3, 0x0, 0x1, [{0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xa0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x74, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3ff}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6b}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x294, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "0900f75570bdab3a64a6cf468f2ee3cc18cd14f84d1f3041ced6feaaa481133970c2efa058077057b013275115008d2291172283c4cf0aa61ac722e4fce96b6d507b03ef94119145"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "b36182f406ac6d0d7977c9daaee1b68e35983a4e35d1002c5981369e1be75db5db884c452a8e2da6be3e75db089c6d7dd5db8be87575aba53349f0569d768ba8ee924d774677efa33c2fb2481b30e5e3d66b2d86dae17aeb3f828cf5deb45db279a1c9d81ae03cdab886278a2fa555db90b99915139a771a737f4c417c257423b77f5987afdd07177d88de30b97d5bf00d53b9d5981a07774ee0a55299696458b28382971b1fd13f5bc13b8ca2223edc7792e6f9f1d8b6bb80ec3b4315c251efdead"}, @NFTA_DATA_VALUE={0xc0, 0x1, "8ea612c4a5a15344b1f416256f91bec4fd119cf56f55575c5cf4fb0d8be67c5f02c67958aae4228e2637dc3a5063f22bd5e4da93be615d886cf377f1d81722542c7be0292eec8823cba409655a13c533cbb4909cba13f2b9332b9d58bf37941f00493fd5d15836714edd13d9c81e888a074390021ce18ba7a396c383518ad4595f156d98267133cd952b4135c9a9bc906ef5ac6afaf5dec908ff8019079517649e13d20d8d1025423eb23ecbdd88be03e3d3278496ef82999caa6b4c"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xda50}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x41, 0x1, "4e77c6af0d6f1b4d238c749ff01ae9fd1d79eec8a8ee59c0373ace607c51e8ca27d0f2a3cfdfe28bb74fd58ae5310913a508bb64e17e5cbf4fade0045e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "370d0257a8514f8cef83748934e72e181f47e136b6350838d05a4cb0831461434db5ea07c270e6d4b2edf4eac601ca8af769"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa6d}]}, @NFTA_DATA_VALUE={0x82, 0x1, "341f3a82afd876533ea7fbc36a593eb8332f39bd7b10f066fa001324a3ae144530dee9f9bc3f59ec2d9d507f11c160b728f5250aad0b2c7e17dc3ff2b38b74886eb5dee9cc5c8bdbd168f3d9da1399a6b2cf78339006376cf4cccf602ba78c1f5c55655b8fe74b99eef54e4db894fd8c79bfd15029617869550c6331f8f6"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0x34, 0x1, "b51e70fdac008b377d795aa76a81ea99d48b6e3e6ab740ff9b0dec7e27c2ba25aa83462b5c14dfde64bf87e29536c0d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "ecfb47ee7925fee3e64c274503c8c97a936509086a60cc63504d563398e1bd5af5974d0813d7ce22d20902dbb0ec853731853e21479712455838dfe91666cf82af0a16c45dc69347f445ca828f789d7990a1e09dce76edb9cf304a48cffa051455cdca713e2cc0e1bfec030874"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffb8}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x0, 0x0, 0x0, {0x14, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x2f}]}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xe4}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x2f, 0xc, "891a6cb2954b618c762964762c50d7943f26eadf80b2afdf0824b6621d6a76f4b36c56723f2ed8c2125ea2"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}]}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x80, 0x8, 0xa, 0x5, 0x0, 0x0, {0xf, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfff}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x50, 0x7, 0x1, 0x0, "08b0624a38c40b68249802fced3f4df54ee7387196fa477e8263df0ef75f0aafe907fc0334a26b2799c57691b48c8845ae74a2bc41c00411e95dd87be8f5fc3fd8652d97cf16ba21c429e32d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x93c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:25 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000002ed10000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xc}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000003342000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000002d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000480100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.161277][T31265] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[ 1531.170966][T31259] EXT4-fs (loop4): invalid inodes per group: 4294836256
[ 1531.170966][T31259] 
[ 1531.184320][T31265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x774, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x724, 0x3, 0x0, 0x1, [{0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xa0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x74, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3ff}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6b}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x294, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "0900f75570bdab3a64a6cf468f2ee3cc18cd14f84d1f3041ced6feaaa481133970c2efa058077057b013275115008d2291172283c4cf0aa61ac722e4fce96b6d507b03ef94119145"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "b36182f406ac6d0d7977c9daaee1b68e35983a4e35d1002c5981369e1be75db5db884c452a8e2da6be3e75db089c6d7dd5db8be87575aba53349f0569d768ba8ee924d774677efa33c2fb2481b30e5e3d66b2d86dae17aeb3f828cf5deb45db279a1c9d81ae03cdab886278a2fa555db90b99915139a771a737f4c417c257423b77f5987afdd07177d88de30b97d5bf00d53b9d5981a07774ee0a55299696458b28382971b1fd13f5bc13b8ca2223edc7792e6f9f1d8b6bb80ec3b4315c251efdead"}, @NFTA_DATA_VALUE={0xc0, 0x1, "8ea612c4a5a15344b1f416256f91bec4fd119cf56f55575c5cf4fb0d8be67c5f02c67958aae4228e2637dc3a5063f22bd5e4da93be615d886cf377f1d81722542c7be0292eec8823cba409655a13c533cbb4909cba13f2b9332b9d58bf37941f00493fd5d15836714edd13d9c81e888a074390021ce18ba7a396c383518ad4595f156d98267133cd952b4135c9a9bc906ef5ac6afaf5dec908ff8019079517649e13d20d8d1025423eb23ecbdd88be03e3d3278496ef82999caa6b4c"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xda50}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x41, 0x1, "4e77c6af0d6f1b4d238c749ff01ae9fd1d79eec8a8ee59c0373ace607c51e8ca27d0f2a3cfdfe28bb74fd58ae5310913a508bb64e17e5cbf4fade0045e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "370d0257a8514f8cef83748934e72e181f47e136b6350838d05a4cb0831461434db5ea07c270e6d4b2edf4eac601ca8af769"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa6d}]}, @NFTA_DATA_VALUE={0x82, 0x1, "341f3a82afd876533ea7fbc36a593eb8332f39bd7b10f066fa001324a3ae144530dee9f9bc3f59ec2d9d507f11c160b728f5250aad0b2c7e17dc3ff2b38b74886eb5dee9cc5c8bdbd168f3d9da1399a6b2cf78339006376cf4cccf602ba78c1f5c55655b8fe74b99eef54e4db894fd8c79bfd15029617869550c6331f8f6"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0x34, 0x1, "b51e70fdac008b377d795aa76a81ea99d48b6e3e6ab740ff9b0dec7e27c2ba25aa83462b5c14dfde64bf87e29536c0d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "ecfb47ee7925fee3e64c274503c8c97a936509086a60cc63504d563398e1bd5af5974d0813d7ce22d20902dbb0ec853731853e21479712455838dfe91666cf82af0a16c45dc69347f445ca828f789d7990a1e09dce76edb9cf304a48cffa051455cdca713e2cc0e1bfec030874"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffb8}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x0, 0x0, 0x0, {0x14, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x2f}]}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xe4}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x2f, 0xc, "891a6cb2954b618c762964762c50d7943f26eadf80b2afdf0824b6621d6a76f4b36c56723f2ed8c2125ea2"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}]}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x80, 0x8, 0xa, 0x5, 0x0, 0x0, {0xf, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfff}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x50, 0x7, 0x1, 0x0, "08b0624a38c40b68249802fced3f4df54ee7387196fa477e8263df0ef75f0aafe907fc0334a26b2799c57691b48c8845ae74a2bc41c00411e95dd87be8f5fc3fd8652d97cf16ba21c429e32d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x93c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

[ 1531.244681][T31281] loop2: detected capacity change from 0 to 264192
[ 1531.263432][T31283] loop1: detected capacity change from 0 to 264192
[ 1531.271985][T31282] loop4: detected capacity change from 0 to 140
[ 1531.279621][T12943] EXT4-fs (loop3): unmounting filesystem.
04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xf}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x774, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x724, 0x3, 0x0, 0x1, [{0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xa0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x74, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3ff}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6b}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x294, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "0900f75570bdab3a64a6cf468f2ee3cc18cd14f84d1f3041ced6feaaa481133970c2efa058077057b013275115008d2291172283c4cf0aa61ac722e4fce96b6d507b03ef94119145"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "b36182f406ac6d0d7977c9daaee1b68e35983a4e35d1002c5981369e1be75db5db884c452a8e2da6be3e75db089c6d7dd5db8be87575aba53349f0569d768ba8ee924d774677efa33c2fb2481b30e5e3d66b2d86dae17aeb3f828cf5deb45db279a1c9d81ae03cdab886278a2fa555db90b99915139a771a737f4c417c257423b77f5987afdd07177d88de30b97d5bf00d53b9d5981a07774ee0a55299696458b28382971b1fd13f5bc13b8ca2223edc7792e6f9f1d8b6bb80ec3b4315c251efdead"}, @NFTA_DATA_VALUE={0xc0, 0x1, "8ea612c4a5a15344b1f416256f91bec4fd119cf56f55575c5cf4fb0d8be67c5f02c67958aae4228e2637dc3a5063f22bd5e4da93be615d886cf377f1d81722542c7be0292eec8823cba409655a13c533cbb4909cba13f2b9332b9d58bf37941f00493fd5d15836714edd13d9c81e888a074390021ce18ba7a396c383518ad4595f156d98267133cd952b4135c9a9bc906ef5ac6afaf5dec908ff8019079517649e13d20d8d1025423eb23ecbdd88be03e3d3278496ef82999caa6b4c"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xda50}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x41, 0x1, "4e77c6af0d6f1b4d238c749ff01ae9fd1d79eec8a8ee59c0373ace607c51e8ca27d0f2a3cfdfe28bb74fd58ae5310913a508bb64e17e5cbf4fade0045e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "370d0257a8514f8cef83748934e72e181f47e136b6350838d05a4cb0831461434db5ea07c270e6d4b2edf4eac601ca8af769"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa6d}]}, @NFTA_DATA_VALUE={0x82, 0x1, "341f3a82afd876533ea7fbc36a593eb8332f39bd7b10f066fa001324a3ae144530dee9f9bc3f59ec2d9d507f11c160b728f5250aad0b2c7e17dc3ff2b38b74886eb5dee9cc5c8bdbd168f3d9da1399a6b2cf78339006376cf4cccf602ba78c1f5c55655b8fe74b99eef54e4db894fd8c79bfd15029617869550c6331f8f6"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0x34, 0x1, "b51e70fdac008b377d795aa76a81ea99d48b6e3e6ab740ff9b0dec7e27c2ba25aa83462b5c14dfde64bf87e29536c0d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "ecfb47ee7925fee3e64c274503c8c97a936509086a60cc63504d563398e1bd5af5974d0813d7ce22d20902dbb0ec853731853e21479712455838dfe91666cf82af0a16c45dc69347f445ca828f789d7990a1e09dce76edb9cf304a48cffa051455cdca713e2cc0e1bfec030874"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffb8}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x0, 0x0, 0x0, {0x14, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e22}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x2f}]}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xe4}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x2f, 0xc, "891a6cb2954b618c762964762c50d7943f26eadf80b2afdf0824b6621d6a76f4b36c56723f2ed8c2125ea2"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}]}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x80, 0x8, 0xa, 0x5, 0x0, 0x0, {0xf, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfff}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x50, 0x7, 0x1, 0x0, "08b0624a38c40b68249802fced3f4df54ee7387196fa477e8263df0ef75f0aafe907fc0334a26b2799c57691b48c8845ae74a2bc41c00411e95dd87be8f5fc3fd8652d97cf16ba21c429e32d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x93c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

[ 1531.292937][T31282] EXT4-fs (loop4): invalid inodes per group: 33554464
[ 1531.292937][T31282] 
[ 1531.296672][T31283] EXT4-fs (loop1): Invalid log cluster size: 53550
[ 1531.312285][T31281] EXT4-fs (loop2): Invalid log cluster size: 50331648
[ 1531.322655][T31290] loop3: detected capacity change from 0 to 264192
04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x10}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:25 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000003d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000372000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000002ed20000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:25 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

04:27:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000500100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.341765][T31290] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[ 1531.351709][T31290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1531.404793][T31301] loop4: detected capacity change from 0 to 140
[ 1531.412232][T12943] EXT4-fs (loop3): unmounting filesystem.
[ 1531.418408][T31302] loop2: detected capacity change from 0 to 264192
[ 1531.426328][T31304] loop1: detected capacity change from 0 to 264192
[ 1531.428675][T22837] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1531.442004][T22837] Buffer I/O error on dev loop1, logical block 0, async page read
04:27:25 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

04:27:25 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)

[ 1531.453233][T31301] EXT4-fs (loop4): invalid inodes per group: 50331680
[ 1531.453233][T31301] 
[ 1531.479069][T31302] EXT4-fs (loop2): #blocks per group too big: 8247
[ 1531.485104][T31304] EXT4-fs (loop1): Invalid log cluster size: 53806
[ 1531.489187][T31309] loop3: detected capacity change from 0 to 264192
04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002382000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000dc0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:25 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000004d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x11}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1531.504035][T31309] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
04:27:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup2(r0, r0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x40, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1b473004}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24002084}, 0x0)

04:27:25 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000003e2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.561785][T31321] loop1: detected capacity change from 0 to 264192
[ 1531.565009][T31309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1531.583370][T31318] loop4: detected capacity change from 0 to 140
[ 1531.595312][T31325] loop2: detected capacity change from 0 to 264192
04:27:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000200090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x60}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000300090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.605921][T31318] EXT4-fs (loop4): invalid inodes per group: 67108896
[ 1531.605921][T31318] 
[ 1531.617256][T31325] EXT4-fs (loop2): #blocks per group too big: 8254
[ 1531.622708][T31321] EXT4-fs (loop1): Invalid log cluster size: 56320
[ 1531.625605][T12943] EXT4-fs (loop3): unmounting filesystem.
04:27:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup2(r0, r0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x40, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1b473004}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24002084}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
dup2(r0, r0) (async)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x40, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1b473004}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24002084}, 0x0) (async)

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000003f2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000005d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.686532][T31332] loop3: detected capacity change from 0 to 264192
[ 1531.687149][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1531.702274][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1531.715154][T31332] EXT4-fs (loop3): inodes count not valid: 196640 vs 32
[ 1531.723400][T31336] loop2: detected capacity change from 0 to 264192
04:27:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup2(r0, r0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x40, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1b473004}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x24002084}, 0x0)

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000de0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x300}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000400090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.753738][T31342] loop4: detected capacity change from 0 to 140
[ 1531.772242][T31336] EXT4-fs (loop2): #blocks per group too big: 8255
[ 1531.793761][T31348] loop1: detected capacity change from 0 to 264192
04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x3bc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x254, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x240, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "64f4e5d49223ca6667288a4ecf9924814b4929191875c2b970ed07bc1654799005d974eda3e3fadad5698b37d2ee506c3e420de16bb0882cdc75b1c88a5a3c66668375a744122083523540feabaf14c79f35f6231c9d6b8e819115a9aba1c15502df9aa3d419aff1160e148f0412a4c2ff"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "ece84387ee95d73bbb4ee949f5bd8a062cf43e0c3237e2a759edb6bda35ef89ff617ec36705453ca822e08fe4ef0f9b6a481617f11f1960781216fbe8787e61b17f84ae2090facfb8cf1d60dd578f804229a21c439bb68acc5f1f44696cbd2446675b30cf3cfda962d879d3ab278d95cb9524913fcdc7da1c6dd4c9e355724a8772806aacc0a02bcb062615fe49281d50afd5d1b60c4665484c5bf3545b2ad1d59f1010a28f7a3cf41d1637a567c21517dd9b16103cc8d5acf3197e86fd8d814ac12e9de84cbf03c8b210cd579fd8cfe7831532b5b03abd9837c1784463b0928e4769fd8cae761a15cd6eb98c1e677"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x33df}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}]}, @NFTA_DATA_VALUE={0x32, 0x1, "36a033c9e7d9835c2c3c25a742534c7c985a570ca22dca0c16fb364813f83aaa7e34a5c920e5aafa448c284e3d01"}]}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x434}, 0x1, 0x0, 0x0, 0xc900}, 0x40090)

[ 1531.794285][T22835] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1531.803897][T31350] loop3: detected capacity change from 0 to 264192
[ 1531.819377][T31342] EXT4-fs (loop4): invalid inodes per group: 83886112
[ 1531.819377][T31342] 
04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x500}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000001de0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000402000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000006d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1531.846517][T31348] EXT4-fs (loop1): Invalid log cluster size: 56832
[ 1531.865923][T31350] EXT4-fs (loop3): inodes count not valid: 262176 vs 32
04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x3bc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x254, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x240, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "64f4e5d49223ca6667288a4ecf9924814b4929191875c2b970ed07bc1654799005d974eda3e3fadad5698b37d2ee506c3e420de16bb0882cdc75b1c88a5a3c66668375a744122083523540feabaf14c79f35f6231c9d6b8e819115a9aba1c15502df9aa3d419aff1160e148f0412a4c2ff"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "ece84387ee95d73bbb4ee949f5bd8a062cf43e0c3237e2a759edb6bda35ef89ff617ec36705453ca822e08fe4ef0f9b6a481617f11f1960781216fbe8787e61b17f84ae2090facfb8cf1d60dd578f804229a21c439bb68acc5f1f44696cbd2446675b30cf3cfda962d879d3ab278d95cb9524913fcdc7da1c6dd4c9e355724a8772806aacc0a02bcb062615fe49281d50afd5d1b60c4665484c5bf3545b2ad1d59f1010a28f7a3cf41d1637a567c21517dd9b16103cc8d5acf3197e86fd8d814ac12e9de84cbf03c8b210cd579fd8cfe7831532b5b03abd9837c1784463b0928e4769fd8cae761a15cd6eb98c1e677"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x33df}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}]}, @NFTA_DATA_VALUE={0x32, 0x1, "36a033c9e7d9835c2c3c25a742534c7c985a570ca22dca0c16fb364813f83aaa7e34a5c920e5aafa448c284e3d01"}]}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x434}, 0x1, 0x0, 0x0, 0xc900}, 0x40090)

[ 1531.910818][T31358] loop1: detected capacity change from 0 to 264192
[ 1531.918590][T31358] EXT4-fs (loop1): Invalid log cluster size: 56833
[ 1531.924446][T31361] loop2: detected capacity change from 0 to 264192
[ 1531.937548][T31360] loop4: detected capacity change from 0 to 140
04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000500090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000ea0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x5c1}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1531.957096][T31360] EXT4-fs (loop4): invalid inodes per group: 100663328
[ 1531.957096][T31360] 
[ 1531.962220][T31361] EXT4-fs (loop2): #blocks per group too big: 8256
[ 1531.978526][T31368] loop3: detected capacity change from 0 to 264192
[ 1531.985929][T31368] EXT4-fs (loop3): inodes count not valid: 327712 vs 32
[ 1532.000087][T31370] loop1: detected capacity change from 0 to 264192
04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x3bc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x254, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x240, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "64f4e5d49223ca6667288a4ecf9924814b4929191875c2b970ed07bc1654799005d974eda3e3fadad5698b37d2ee506c3e420de16bb0882cdc75b1c88a5a3c66668375a744122083523540feabaf14c79f35f6231c9d6b8e819115a9aba1c15502df9aa3d419aff1160e148f0412a4c2ff"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "ece84387ee95d73bbb4ee949f5bd8a062cf43e0c3237e2a759edb6bda35ef89ff617ec36705453ca822e08fe4ef0f9b6a481617f11f1960781216fbe8787e61b17f84ae2090facfb8cf1d60dd578f804229a21c439bb68acc5f1f44696cbd2446675b30cf3cfda962d879d3ab278d95cb9524913fcdc7da1c6dd4c9e355724a8772806aacc0a02bcb062615fe49281d50afd5d1b60c4665484c5bf3545b2ad1d59f1010a28f7a3cf41d1637a567c21517dd9b16103cc8d5acf3197e86fd8d814ac12e9de84cbf03c8b210cd579fd8cfe7831532b5b03abd9837c1784463b0928e4769fd8cae761a15cd6eb98c1e677"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x33df}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}]}, @NFTA_DATA_VALUE={0x32, 0x1, "36a033c9e7d9835c2c3c25a742534c7c985a570ca22dca0c16fb364813f83aaa7e34a5c920e5aafa448c284e3d01"}]}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x434}, 0x1, 0x0, 0x0, 0xc900}, 0x40090)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x3bc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x254, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x240, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "64f4e5d49223ca6667288a4ecf9924814b4929191875c2b970ed07bc1654799005d974eda3e3fadad5698b37d2ee506c3e420de16bb0882cdc75b1c88a5a3c66668375a744122083523540feabaf14c79f35f6231c9d6b8e819115a9aba1c15502df9aa3d419aff1160e148f0412a4c2ff"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "ece84387ee95d73bbb4ee949f5bd8a062cf43e0c3237e2a759edb6bda35ef89ff617ec36705453ca822e08fe4ef0f9b6a481617f11f1960781216fbe8787e61b17f84ae2090facfb8cf1d60dd578f804229a21c439bb68acc5f1f44696cbd2446675b30cf3cfda962d879d3ab278d95cb9524913fcdc7da1c6dd4c9e355724a8772806aacc0a02bcb062615fe49281d50afd5d1b60c4665484c5bf3545b2ad1d59f1010a28f7a3cf41d1637a567c21517dd9b16103cc8d5acf3197e86fd8d814ac12e9de84cbf03c8b210cd579fd8cfe7831532b5b03abd9837c1784463b0928e4769fd8cae761a15cd6eb98c1e677"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x33df}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}]}, @NFTA_DATA_VALUE={0x32, 0x1, "36a033c9e7d9835c2c3c25a742534c7c985a570ca22dca0c16fb364813f83aaa7e34a5c920e5aafa448c284e3d01"}]}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x434}, 0x1, 0x0, 0x0, 0xc900}, 0x40090) (async)

04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000600090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000462000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000007d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.010188][T31370] EXT4-fs (loop1): Invalid log cluster size: 59904
[ 1532.051473][T31376] loop2: detected capacity change from 0 to 264192
[ 1532.057310][T31379] loop3: detected capacity change from 0 to 264192
[ 1532.076437][T31380] loop4: detected capacity change from 0 to 140
04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000c0ed0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000482000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x600}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1532.099851][T31376] EXT4-fs (loop2): #blocks per group too big: 8262
[ 1532.102955][T31379] EXT4-fs (loop3): inodes count not valid: 393248 vs 32
[ 1532.121920][T31380] EXT4-fs (loop4): invalid inodes per group: 117440544
[ 1532.121920][T31380] 
[ 1532.128867][T31386] loop1: detected capacity change from 0 to 264192
[ 1532.143889][T31386] EXT4-fs (loop1): Invalid log cluster size: 60864
04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0)

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffe0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000008d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000700090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.152857][T31388] loop2: detected capacity change from 0 to 264192
[ 1532.171205][T31388] EXT4-fs (loop2): #blocks per group too big: 8264
04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0)

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000003492000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.202463][T31396] loop1: detected capacity change from 0 to 264192
[ 1532.205262][ T1437]  loop1: unable to read partition table
[ 1532.214055][T31395] loop3: detected capacity change from 0 to 264192
[ 1532.217165][T31399] loop4: detected capacity change from 0 to 140
[ 1532.234025][T31396] EXT4-fs (loop1): Invalid log cluster size: 65279
[ 1532.242885][T31395] EXT4-fs (loop3): inodes count not valid: 458784 vs 32
04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x700}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0)

04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000009d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000fff0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000004a2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000800090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.257098][T31399] EXT4-fs (loop4): invalid inodes per group: 134217760
[ 1532.257098][T31399] 
[ 1532.276376][T31403] loop2: detected capacity change from 0 to 264192
[ 1532.278067][T22837]  loop2: unable to read partition table
[ 1532.294832][T31403] EXT4-fs (loop2): Invalid log cluster size: 50331648
04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x900}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000fb831807080900020073797a300000000005000100070000000900020073797a32000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a30000000000500010007000000f5000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

[ 1532.359532][T31413] loop3: detected capacity change from 0 to 264192
[ 1532.362182][T31414] loop4: detected capacity change from 0 to 140
[ 1532.384333][T31417] loop2: detected capacity change from 0 to 264192
[ 1532.392922][T31421] loop1: detected capacity change from 0 to 264192
[ 1532.401316][T31413] EXT4-fs (loop3): inodes count not valid: 524320 vs 32
04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xa00}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000fb831807080900020073797a300000000005000100070000000900020073797a32000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a30000000000500010007000000f5000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000fb831807080900020073797a300000000005000100070000000900020073797a32000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a30000000000500010007000000f5000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)

04:27:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000900090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000feff0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1532.408559][T31421] EXT4-fs (loop1): Invalid log cluster size: 65295
[ 1532.416319][T31414] EXT4-fs (loop4): invalid inodes per group: 150994976
[ 1532.416319][T31414] 
[ 1532.429999][T31417] EXT4-fs (loop2): #blocks per group too big: 8266
04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000000ad7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000004c2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000fb831807080900020073797a300000000005000100070000000900020073797a32000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a30000000000500010007000000f5000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

[ 1532.482767][T31429] loop3: detected capacity change from 0 to 264192
[ 1532.498273][T31431] loop1: detected capacity change from 0 to 264192
[ 1532.502710][T23865]  loop1: unable to read partition table
[ 1532.516274][T31435] loop4: detected capacity change from 0 to 140
[ 1532.517154][T22835]  loop4: unable to read partition table
04:27:26 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000000bd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xb00}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1532.532581][T31438] loop2: detected capacity change from 0 to 264192
[ 1532.540062][T31435] EXT4-fs (loop4): invalid inodes per group: 167772192
[ 1532.540062][T31435] 
[ 1532.541479][T31429] EXT4-fs (loop3): inodes count not valid: 589856 vs 32
04:27:26 executing program 0:
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="18f993d84483097a9816db3f41d5b2b5d6e70bd65c57f54f8e034171f7c4f942e89462aa97b8a59838aca3b62ad064e859d445cebe820134b9d80a9386ac791e2d2e289296f1697fd90c531a9ad5eca69c8437b05d2531f887b4bc54aab89b53458cd4257648c1ad04da25ebc486916de5b442ce93e271fde15cdfe06fee77ddc275dc0f33c34e1286a56c79def3d1897fcf259f34ec3e0430def01f4e2305e145409bc2ae82b20017615dcee7dd857fd5e7fe08d9fa2cf0fd18a98b89078cdf49c092a15f5a461a99ff2f5e7fc356c606", 0xd1}, 0x68)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000f5aa0601020000000000000000030000080900020073797a300000000005000100070000000900020073797a32000000000900020073797a27000d64fd1df5e233bf6499f50900020073797a320000000005000100070000000900020073797a30000000000500010007000000050001000700000005000100070000000223da56217a139d94849b288f60c70cee4065d68e97ea8e21e7baf3d1"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil)

04:27:26 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000040200002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1532.576151][T31431] EXT4-fs (loop1): Invalid log cluster size: 65534
[ 1532.593816][T31438] EXT4-fs (loop2): #blocks per group too big: 8268
04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000034e2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="18f993d84483097a9816db3f41d5b2b5d6e70bd65c57f54f8e034171f7c4f942e89462aa97b8a59838aca3b62ad064e859d445cebe820134b9d80a9386ac791e2d2e289296f1697fd90c531a9ad5eca69c8437b05d2531f887b4bc54aab89b53458cd4257648c1ad04da25ebc486916de5b442ce93e271fde15cdfe06fee77ddc275dc0f33c34e1286a56c79def3d1897fcf259f34ec3e0430def01f4e2305e145409bc2ae82b20017615dcee7dd857fd5e7fe08d9fa2cf0fd18a98b89078cdf49c092a15f5a461a99ff2f5e7fc356c606", 0xd1}, 0x68)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000f5aa0601020000000000000000030000080900020073797a300000000005000100070000000900020073797a32000000000900020073797a27000d64fd1df5e233bf6499f50900020073797a320000000005000100070000000900020073797a30000000000500010007000000050001000700000005000100070000000223da56217a139d94849b288f60c70cee4065d68e97ea8e21e7baf3d1"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil)

[ 1532.624201][T31442] loop4: detected capacity change from 0 to 140
[ 1532.639427][T31446] loop1: detected capacity change from 0 to 264192
04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000a00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="18f993d84483097a9816db3f41d5b2b5d6e70bd65c57f54f8e034171f7c4f942e89462aa97b8a59838aca3b62ad064e859d445cebe820134b9d80a9386ac791e2d2e289296f1697fd90c531a9ad5eca69c8437b05d2531f887b4bc54aab89b53458cd4257648c1ad04da25ebc486916de5b442ce93e271fde15cdfe06fee77ddc275dc0f33c34e1286a56c79def3d1897fcf259f34ec3e0430def01f4e2305e145409bc2ae82b20017615dcee7dd857fd5e7fe08d9fa2cf0fd18a98b89078cdf49c092a15f5a461a99ff2f5e7fc356c606", 0xd1}, 0x68)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000f5aa0601020000000000000000030000080900020073797a300000000005000100070000000900020073797a32000000000900020073797a27000d64fd1df5e233bf6499f50900020073797a320000000005000100070000000900020073797a30000000000500010007000000050001000700000005000100070000000223da56217a139d94849b288f60c70cee4065d68e97ea8e21e7baf3d1"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="18f993d84483097a9816db3f41d5b2b5d6e70bd65c57f54f8e034171f7c4f942e89462aa97b8a59838aca3b62ad064e859d445cebe820134b9d80a9386ac791e2d2e289296f1697fd90c531a9ad5eca69c8437b05d2531f887b4bc54aab89b53458cd4257648c1ad04da25ebc486916de5b442ce93e271fde15cdfe06fee77ddc275dc0f33c34e1286a56c79def3d1897fcf259f34ec3e0430def01f4e2305e145409bc2ae82b20017615dcee7dd857fd5e7fe08d9fa2cf0fd18a98b89078cdf49c092a15f5a461a99ff2f5e7fc356c606", 0xd1}, 0x68) (async)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000f5aa0601020000000000000000030000080900020073797a300000000005000100070000000900020073797a32000000000900020073797a27000d64fd1df5e233bf6499f50900020073797a320000000005000100070000000900020073797a30000000000500010007000000050001000700000005000100070000000223da56217a139d94849b288f60c70cee4065d68e97ea8e21e7baf3d1"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x3000)=nil) (async)

04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffff0300002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1532.667988][T31446] EXT4-fs (loop1): Invalid log cluster size: 132096
[ 1532.683033][T31442] EXT4-fs (loop4): invalid inodes per group: 184549408
[ 1532.683033][T31442] 
[ 1532.684533][T31454] loop2: detected capacity change from 0 to 264192
[ 1532.694697][T22835]  loop2: unable to read partition table
04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xc00}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000000300000809000200737978300000080805000100070000000900022073790900000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a3000000000050001000700000005000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

[ 1532.725974][T31465] loop3: detected capacity change from 0 to 264192
[ 1532.745940][T31454] EXT4-fs (loop2): Invalid log cluster size: 50331648
[ 1532.747756][T31467] loop1: detected capacity change from 0 to 264192
[ 1532.761154][T31465] EXT4-fs (loop3): inodes count not valid: 655392 vs 32
04:27:27 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000000cd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.770569][T31467] EXT4-fs (loop1): Invalid log cluster size: 262143
04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000001502000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000000300000809000200737978300000080805000100070000000900022073790900000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a3000000000050001000700000005000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000400002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000b00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.801214][T31473] loop4: detected capacity change from 0 to 140
[ 1532.836974][T31480] loop2: detected capacity change from 0 to 264192
04:27:27 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000306010200000000000000000300000809000200737978300000080805000100070000000900022073790900000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a3000000000050001000700000005000100070000000500010007000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xf00}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000000dd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x90, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x41d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x95}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x90}}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001780)={{0x0, 0x3ff, 0x5, 0x100000000, 0x0, 0x5, 0x2854, 0x9, 0x1, 0x4, 0x0, 0x101, 0x2, 0xffffffffffffffff, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x11)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg(r3, &(0x7f0000001740)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="edfb7b702897cab2ee5c6636b06d906cb0ad7e806685696b9361c2d394a1d6b744f0af3d20ce2184fd24b24e339ebf075002e32aa9b6735d3ba60a2b331fb8372e441a2095f4526115a1b4a53b9d590807e1d75efdce6c197e3706993359614aef9c404797fa719d4b3ef9f1cc701143b57489600e60d254cf51205f8bca97349a67c54df6125bc92b39b7008b390199119aa40b9dbd77516f8f71c94aa98f141f7263bfbf56ce8baed450aec1d5f16b6dda598038b0b14d2110", 0xba}], 0x1, &(0x7f00000004c0)=[{0x30, 0x103, 0x1, "d09494f408e7ed3a3c13e2e6753da5940cd7a9ba52b585d552ff6c7fc3"}, {0xa8, 0x1, 0x7, "06a63b32463ce4042f77c9fe5768ac35377051455f57bf32fe27201e3a7fef816a4e39ddaf605355237b12b2b762c51c4dec2f8891e76b00924e3859672c24c6f03956c40135d004d91a7fece5d0cb230ee4c5fe2ad09d87eaeed4e8a9f4d311fe81ef4f5a2b46db6ad0d37ac8a26682aed29a48432de8784280b84dea622e4fdba37879bcf806be29ad7213f1c3c9d5b93b"}, {0x1010, 0x116, 0x3, "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"}, {0x58, 0x10b, 0x9, "a58bcdd48669f2ceb478223279c670a1e7739e22bfa06f0107f075a051189499656e5b6e0377b76ec540e2d19b6e0ece00597a75ecbc494715e70b98d6634666078d41"}, {0x50, 0x102, 0x4, "43b4a9928bce636b7247557dfe9eb9fc0d4efc456770442c185e433fa769f5a2f5043bdc1cd496fd8c7bbf6af903eef7bcb620baf6ae15347a4b7087a1f9df"}, {0x18, 0x10e, 0x100, "512eea15fd8d3f15"}, {0xd0, 0x1, 0x1, "e4440e6660bb60c5309ca490d60d441286d54978403bdb0dab94d76abe0170f5b1a4e413bd98bbae4d88a79233678710a5cd17adb74ec17a437c4c2f9aca5918ea088c376f49b15ba2f3d816d3338e8f19088baf0061cea428651944303ca22e582bf7674a40dcf362383e1a229b4bde7417e46fb9bbba215f3a727c4e87cbe7b92f215bf84745d0380c65e6ae6f1003c72cc492b116319d9f417ca66ff177ce020c90ed48f63c114da2133391b3e502b177b97a34b89d5ee905f957be9536dc"}], 0x1278}, 0x8082)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="78000000030601020000000000000000030000080900501acba1020073797a3000000000050001000700e4e32c8bb05fc35afc8e6cdf5bc373e400000900020073797af9000000000900020073797a3200000d000900020073797a3200000000050001000700000009000200000500010007000000050001000700f4ff05000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000512000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1532.850396][T31483] loop3: detected capacity change from 0 to 264192
[ 1532.852339][T31484] loop1: detected capacity change from 0 to 264192
[ 1532.864149][T31473] EXT4-fs (loop4): invalid inodes per group: 201326624
[ 1532.864149][T31473] 
[ 1532.874853][T31480] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1532.884734][T31483] EXT4-fs (loop3): inodes count not valid: 720928 vs 32
[ 1532.892463][T31484] EXT4-fs (loop1): Invalid log cluster size: 262144
04:27:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x90, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x41d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x95}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x90}}, 0x40) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001780)={{0x0, 0x3ff, 0x5, 0x100000000, 0x0, 0x5, 0x2854, 0x9, 0x1, 0x4, 0x0, 0x101, 0x2, 0xffffffffffffffff, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x11)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg(r3, &(0x7f0000001740)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="edfb7b702897cab2ee5c6636b06d906cb0ad7e806685696b9361c2d394a1d6b744f0af3d20ce2184fd24b24e339ebf075002e32aa9b6735d3ba60a2b331fb8372e441a2095f4526115a1b4a53b9d590807e1d75efdce6c197e3706993359614aef9c404797fa719d4b3ef9f1cc701143b57489600e60d254cf51205f8bca97349a67c54df6125bc92b39b7008b390199119aa40b9dbd77516f8f71c94aa98f141f7263bfbf56ce8baed450aec1d5f16b6dda598038b0b14d2110", 0xba}], 0x1, &(0x7f00000004c0)=[{0x30, 0x103, 0x1, "d09494f408e7ed3a3c13e2e6753da5940cd7a9ba52b585d552ff6c7fc3"}, {0xa8, 0x1, 0x7, "06a63b32463ce4042f77c9fe5768ac35377051455f57bf32fe27201e3a7fef816a4e39ddaf605355237b12b2b762c51c4dec2f8891e76b00924e3859672c24c6f03956c40135d004d91a7fece5d0cb230ee4c5fe2ad09d87eaeed4e8a9f4d311fe81ef4f5a2b46db6ad0d37ac8a26682aed29a48432de8784280b84dea622e4fdba37879bcf806be29ad7213f1c3c9d5b93b"}, {0x1010, 0x116, 0x3, "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"}, {0x58, 0x10b, 0x9, "a58bcdd48669f2ceb478223279c670a1e7739e22bfa06f0107f075a051189499656e5b6e0377b76ec540e2d19b6e0ece00597a75ecbc494715e70b98d6634666078d41"}, {0x50, 0x102, 0x4, "43b4a9928bce636b7247557dfe9eb9fc0d4efc456770442c185e433fa769f5a2f5043bdc1cd496fd8c7bbf6af903eef7bcb620baf6ae15347a4b7087a1f9df"}, {0x18, 0x10e, 0x100, "512eea15fd8d3f15"}, {0xd0, 0x1, 0x1, "e4440e6660bb60c5309ca490d60d441286d54978403bdb0dab94d76abe0170f5b1a4e413bd98bbae4d88a79233678710a5cd17adb74ec17a437c4c2f9aca5918ea088c376f49b15ba2f3d816d3338e8f19088baf0061cea428651944303ca22e582bf7674a40dcf362383e1a229b4bde7417e46fb9bbba215f3a727c4e87cbe7b92f215bf84745d0380c65e6ae6f1003c72cc492b116319d9f417ca66ff177ce020c90ed48f63c114da2133391b3e502b177b97a34b89d5ee905f957be9536dc"}], 0x1278}, 0x8082)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="78000000030601020000000000000000030000080900501acba1020073797a3000000000050001000700e4e32c8bb05fc35afc8e6cdf5bc373e400000900020073797af9000000000900020073797a3200000d000900020073797a3200000000050001000700000009000200000500010007000000050001000700f4ff05000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000c00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000020400002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1100}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x90, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x41d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x95}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x90}}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001780)={{0x0, 0x3ff, 0x5, 0x100000000, 0x0, 0x5, 0x2854, 0x9, 0x1, 0x4, 0x0, 0x101, 0x2, 0xffffffffffffffff, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x11)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg(r3, &(0x7f0000001740)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="edfb7b702897cab2ee5c6636b06d906cb0ad7e806685696b9361c2d394a1d6b744f0af3d20ce2184fd24b24e339ebf075002e32aa9b6735d3ba60a2b331fb8372e441a2095f4526115a1b4a53b9d590807e1d75efdce6c197e3706993359614aef9c404797fa719d4b3ef9f1cc701143b57489600e60d254cf51205f8bca97349a67c54df6125bc92b39b7008b390199119aa40b9dbd77516f8f71c94aa98f141f7263bfbf56ce8baed450aec1d5f16b6dda598038b0b14d2110", 0xba}], 0x1, &(0x7f00000004c0)=[{0x30, 0x103, 0x1, "d09494f408e7ed3a3c13e2e6753da5940cd7a9ba52b585d552ff6c7fc3"}, {0xa8, 0x1, 0x7, "06a63b32463ce4042f77c9fe5768ac35377051455f57bf32fe27201e3a7fef816a4e39ddaf605355237b12b2b762c51c4dec2f8891e76b00924e3859672c24c6f03956c40135d004d91a7fece5d0cb230ee4c5fe2ad09d87eaeed4e8a9f4d311fe81ef4f5a2b46db6ad0d37ac8a26682aed29a48432de8784280b84dea622e4fdba37879bcf806be29ad7213f1c3c9d5b93b"}, {0x1010, 0x116, 0x3, "a4f6572f567cf474e221a028c97dba79ae4e34b26353ea14ad994d7100409a960bda90b510bfa9e17db517d27a51d5f7a2cb5fb094bdd8a20e01452881e5779e6880e2ac6e69c30fe9a88d1b45c7c7fe0fdd1743fe06c3df7d801339f3aa69045edf46a115e7eeb13e942c70daf974d1a8280abe2f07072a964bc933ed8cab5a6adaa9ac82396ef34c3bc8374ac30531a3aac6e94bbb15a936e11e43d5c9c74663b8fcd8c1dea518916fd80a56f4debebbc0db01cc64123e05c0c03d0dd0d8016d12d3fd564d9c661e4e9e6e44fed9390c89a0f1cbeb7d6bc083c3118e582d39b17810f7ee5f7f19c8aab351e4d6e27b217e0304071f9328b6dcc6284326d22461256189dd093d0eddd6f92f204b95629ad8160f6684c10e947816f389df1e6e1eeaeb8eba6b35c272ab67ba8b7f77a0303e34f200ff5bea2815af8970c58fcfe96f3c71f3493161031d61187d503698fdf34a7ae008d1895ce0bae8e570007eff9a1619dd10a067eb1b3d8a8b633adacea888d5b534595270fdeafafb88cdc5806afdfb299de260aacffc7b800e9c20097ba220c4ce365a481041e608de57fa398a9701255e9efb1f7487b24fad738299183ed12bc04b25db4c2a941808fc19920153e2a70896597ae9c4efb4d6cf306a19470a6ea892fbbedd819d96641d14b9fc0b0b4004c92ccc14d8e68ca00be49c76955ee41ee7110134ab45a01d2f49a84544f43d5de3945d86e0a042c212b7f42d48706da30767de7b5ee41ef4333e576ee9149156d41b3ada5380c45c59e711856c996155b379f05b24aa3a44cd61025e8e0f96787918e22fd3d937e2d88192b245f5ac1efc5ea4bfdf7108d4bfda8e5522a0f7d57cb4abfd0884659feaaecc334d7a6cc8244d00388d3eca25fa45b55f5e98955f15d70788d0654bd1807091df1a91b80240f062f0f77e60f8ac04a1eb27118a88dd1f02d52b87adcfdd66d751ce9607e93e1b7b32ad7a5db9b1d161dfb953b81a7289b908bd058d8cd9a5419dbf82e9af322da4441cb17c5f30390a13c6ca44dc9bdf368714cb609b96c0be80e656c755aeff0eeb57aeb054e76e9d984e563d8a367981d93e013a7edceb0a84471058509be9551ec4ed711bc480cac72a9fbe090a26b67de9a2e3f72e40c8f860b4000ec2959ffdebe2d9f1960a60227d5bf8e06f7c24a3ad09801dc0eedf0663952f29a130f4a95716ff09063aa6f43b23ffea2dd9359deeffbc9e375ab3a5658925b8e3112cc2f09163840e0999b8c208e5a28b96f968f318be42c52a83ea525e98f1493eecb711412adba169e0ce500ddbea64430dc30974ce9691aaf7eb6508195b113affbdbe10f8ae4edc01ee6aaca6a7502937b9bd38de9794807ae9b46f87126ce387a402b88e5b525a0f3f98e920cb10ddfca1bf9dc0188039b5ad348b997a37e3f0786e1ca9b796cf4b55810bb46550cd73959ea75c23d68086db6a7a1788af12c6ab6e560a36986fec5d66ef19efa915d2190d78c4404b2e9a12d199475105c903371a8007000be73cd304a0b8c93a8fa978e37882e5d53381f5806179e0f270b0cfe94d26b066683424faa1f213beffb6d54a9ad912c1fa67ef65a8c606510c5493820cf4efdc8fc99cb9f6dffad31dec8043b4eebc6c208f0551235e991b7bf21d122e5d8ba3c78812f9e8d712092c6dbf904923035c331c25c3fd2cd8480803ed3411498e7120ff1a8b5cde960fbd37074124b0e25c1a104f68d774caf55162c4f7875dd8dc49dfd98249ce9de9736c58094e8a0fcbe33929d051eb60bc72cef41f20966c1d2125ddbebe1377993ab91c001beb871e6d201aec88f4f381cc002010fb600df5375f402f22948a11681a83b1fbe3e3dcd90cace0509e4b1d4e59eecb8ad8f57a564160dd1576e2303c5017027b1b9ec1c9682229cbf667c9487a012693cd6a5373cbd04cbdebb059734aefd123cc039b71ed7b3553f28efc131d7bc3bbb59d928cc1928e23b1d12d08893e3665042230a5882a50ba04a28f731bd7621ca584c7cc420c614a04cd153f1f9f26934b1d7983ceeca729117842fed6c5d69053293d02285749c2e75ab17da6f2edf0af81e924c564a3b114c2a83b7f2798a4a9beecf6d3d2574e790060eeba55ddb6c92202603331381b3b18dbd52b7e9934292b79acb18a37ac3b4fa4ca35d768eeb72717140d8be6d81925b299f7772cf8c93964205b8bc6922f451cb885bd59ee92f58d702014afb735016d980d1d3c4057353eeb18a595001bae291aef198b8ba2592f2f0376eb768fadc620b4be34ac32b26d0d1fe92ede3147343cdd18a882b7a3eada4f354a64469ac3201fb845db5a647288ce536a4e429ba4cf2c2bf487fc01cb2c9e932bd574b79a3040a4be3e660f0a6d788ccb09843e3139ebfe50e5027bb848c2c36dda2bf63ec60f08ed4d43b286aea8c88d9a3dcf77f9d32060afa21424a5f28d000fc93966061128ffe2e08c10b3c07f5a82ace8e094bcc2dc876115de7bfc24f6b5e7957c520bcc843a416dea8b722d190f2d44454995bbc7bc37865e95d2758764848458a8b86ae8b17c2847172e98e7c46f29e2eaa0399cdddb2654746fc4623b5c24977f7c7d45b7c66f3e6d49a25e7e541e75d9f1176bc64f22187815e9f78161d820f70e0f3921f8bf7b540cc234feee29e77f3db5da2034511f8e270c7123d2b213355ded140990acdb4a1b7e58deee5703dda3d1b429bf363e7f34aea3089a5feafdbdf8b5cc7d76570d8d7ba8a2b8a5f3eb48431fdadc27d97290a257c1704d86ab3a11921d4f56ee83180f81598a846a88b5e02cba50df237329dd1c7f283ae2957496dc164d35a0e63880b0b2e1f641ef45488d0305113198dd11395f253c5bfb6c1edf810b28e221885d6ffa82fdd59bf23260cf58bbf1b8771a572b886f421b0e6b4b1ae6758986ed1b386ebe3602fe9aa55a9833664d0c7bd24afc861765611239de459cc81c2747c612dc3bbd1351d55a330fdac9cf729e81bd99962ff3a0578a4b95f1c8cfca034c9633d006a256ce76fdf0490fd488dff29b4e24a1c2def76aaea45a98717b1aee9ea169ef6b99f2b6dca7fe1e1cfb5fcb358ddf5cf011fbdf110b5efd225724caafbfb6c37ada1749835726aca55b8378f2384f7ec6a8aa7cef528c4935f95cbe818908a58964c4e29449c13a303eb96274c7f34da58a41fbbb871fc368f2c6932c5e1bcd090fc0681ed81719613f79645624697c2782930386f4130f7eaa25a91bbe9d567547f9bc03e1fdc370a4e4f5379af1c0c3e4a4df7fa382de69998104b594fa0069153c6e1bee2e0a1a7b13ee2b01a8243d132799883b2444190e8cd654f6e566ab2123eec03f5b7b44184c3d7bf971b7101f1e5995757cc45441a0b891ebdddb78895b1f46821c505ea13f8ab11ab729ae5ac0b728791990260321c7b60a77068b6318934789cbae0de13f7c29fbc6006ee817376da3163d8b659ebd498aac5536e12867a6612e777537401c4b1197d7bb88e9516b7c17a101b21eb877e06136fd035d859d23a3abd85c05cde2533b1cdae752d9ec25f59c854cbc1241631ff72b485bf6247abd5d429ca06a9bc7be05cac70775359c4f6f26eeba21060eca5c686fc5b3dd621bec820e4d7d6b8c0b2402af598cda5237ec4789b4654ec21f5b4979c4d19ad083a55293779e84decfdd95ddac19846924cff153fbc4a00cf8e914825cb59d8d4c56ddf720c63679334161173f026fcc683d9ccc75bc37fef6475302517e29ed316d7dcc5cf8e3195b1ff787f5a7392df7a5d74bbc77f96f51ba2849001b4f5ce0679da2d56cc43c21dc679d9cf6d8e351e7d654a7515965b8d95244424b47476ce5b02ae75c56e0baa0f58e6b74fc972afd427884d64f1c17392e89ffe642b48ceb2ae0a5b9079b812415f46d0b29f7bc1527f24ba36f4b43a7b5cd9e2f80eb431298e417f2a021bf100826286c018378e0b467675029528b38e0e2108bcd5b48f5cbaa67ac5a568c900512ecb5056aac51e6decdcf0673329589c692edd59c8d682a01eb282d4210c4e58a748058b993eb971926a3fd9fabd8ec5546caf29c82850e6ab752e90a89206ba885e2a9b09cca0102a13b84d3d0a8885bd443e46d90d9e280c2ad5729beba2bf8e2d122abcc9b07ffd0118ddd19c43534f6109668381220eb39e779a1948ece4fe2885774a0fa7529792a63a9a3cdfe8b8b5d35345e95002392234bca1dc9f8709dd7c0c30cc12751e2784834bc332951adb2f719e7889f820335f10745c594ef4128605c45b2ef4ba85bc37ea10d872d87b495f4a6c9f7666f749f354cb18fcd050cd29628cf7837a2607d4c76f6f1318ecece30fbee17f583b261c12a46c1c9337b08e4fd4aa7e962de8dbc8c8a93629889d9a91685aeecacaf2342900c7cdb9f7e13cb3912b4e7142d8b4c393c0d418099fb1617d6883883c26abba5769ff4cb7c66410ca874c98bbe60b367f18f315b6344c59d1fd94f7f0cc88ff8d258e1e7ae951b59d86296e6117076840833f0c97ca2a5511e2e7e9d55ef5cbaaea2e14d7b7aba3729661cafdaf4728ba8112a047f15a3cb7df195efafa496eb04e53d8dfb299d71fa6276dfca21411170cc4aeec7c5f2318a8d8349c691a354b3ba1ef9e6dfefbebfd45bf9fda542c16d0f950a918440c3e255c4b86c98e55b09aa24246098e7dc7c1d9fb7c8da570f9ef6d2184c543f7bd9fa5f94f84037ec6b845da58b66f82e3d679bccd3cf78fb58d0c0af753094d0282b4da2697a0fe0a27e006dc18195bf3d78f9901bfb66e946da1b0a1f6a57ddd2f6cbdab44f4b5d426336ad821d73f6cc3eef88ad14f5f48558b08098d8af37d753dc75e614ed436c047ce660cef01683fda61e8580fa258199eacfbc4b238384da4ebe1453813b6a93a87021363691e83854219af59a35a704e9ac4017fc4046931e6e98e57d92f750960cae30b26ecc7f93d17383743e745fb9807168ba76547b242437f3e0fb3d69ae1b1072918e388a5e95d6a4ab6789e7b12f8f4e1701deaa0e42739f39d18fbdf11e6106243a390bceee1b163cb25a9435815995f77ddda0b0c20293f720080e94aad9106000a32adcd7dc2dfc6a16bd31109ca44e81cdbf6bd1bdda153e8f4711e810d27546bf74d3a865e81b1c67d006b503b6275eb6a3e76e2f5147187913df27ddb593265509982c5701c5414e73f1057cb218610dc1c2a2e96e3f3cb54f8c2c887dd5f9dfc0b5bb02a2a177d7ce9c06bf0ae475c470aa5541c71006a15c3969e3888435386bee7b4a618dbd49ab13426b374d0c1921bb168c569a10d49ccf65138123a5b50f1fdccf4c4c6e2228abfa5073cdd2471cff9f99037b4696554768168dc292d9ea623594ad78e92f2d322bbdb6c4b0bcb728b384325f5a096b352ca94a864068fb59e936e62be2e2b9c2713405d1a22ccffb7e92b1014097972230abf707f2df53807ae444a568ec52fd5b6fcb41eb8d2673a3697f81b02534b618ef8c620d5528b96876009c834d2552a36d5195579c842c3f414b4425c68bf4674dea93a47c555bb0488661e60e4b2b2b7b1c316c20b49e916d8eed31c5ac197c6c74e056c9a98d95716269980c76ff025c1c4dfd242c621f35128244f6d83c5e8754ca21eebd00c651a8b156e1bc6758d33a65562c0445a3ca95bed0208059965fde2d194b09aa692b824b2069851c673dc3b9faf8928505f0bc8fb8739f0e0cc8418951d0ed3a841f9328fcdf812504b33911466c27a9778916e9e37cd79d5362f347ace811d8"}, {0x58, 0x10b, 0x9, "a58bcdd48669f2ceb478223279c670a1e7739e22bfa06f0107f075a051189499656e5b6e0377b76ec540e2d19b6e0ece00597a75ecbc494715e70b98d6634666078d41"}, {0x50, 0x102, 0x4, "43b4a9928bce636b7247557dfe9eb9fc0d4efc456770442c185e433fa769f5a2f5043bdc1cd496fd8c7bbf6af903eef7bcb620baf6ae15347a4b7087a1f9df"}, {0x18, 0x10e, 0x100, "512eea15fd8d3f15"}, {0xd0, 0x1, 0x1, "e4440e6660bb60c5309ca490d60d441286d54978403bdb0dab94d76abe0170f5b1a4e413bd98bbae4d88a79233678710a5cd17adb74ec17a437c4c2f9aca5918ea088c376f49b15ba2f3d816d3338e8f19088baf0061cea428651944303ca22e582bf7674a40dcf362383e1a229b4bde7417e46fb9bbba215f3a727c4e87cbe7b92f215bf84745d0380c65e6ae6f1003c72cc492b116319d9f417ca66ff177ce020c90ed48f63c114da2133391b3e502b177b97a34b89d5ee905f957be9536dc"}], 0x1278}, 0x8082)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="78000000030601020000000000000000030000080900501acba1020073797a3000000000050001000700e4e32c8bb05fc35afc8e6cdf5bc373e400000900020073797af9000000000900020073797a3200000d000900020073797a3200000000050001000700000009000200000500010007000000050001000700f4ff05000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x90, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x41d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x95}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x90}}, 0x40) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001780)={{0x0, 0x3ff, 0x5, 0x100000000, 0x0, 0x5, 0x2854, 0x9, 0x1, 0x4, 0x0, 0x101, 0x2, 0xffffffffffffffff, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
pipe2$watch_queue(&(0x7f0000000380), 0x80) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
sendmsg(r3, &(0x7f0000001740)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="edfb7b702897cab2ee5c6636b06d906cb0ad7e806685696b9361c2d394a1d6b744f0af3d20ce2184fd24b24e339ebf075002e32aa9b6735d3ba60a2b331fb8372e441a2095f4526115a1b4a53b9d590807e1d75efdce6c197e3706993359614aef9c404797fa719d4b3ef9f1cc701143b57489600e60d254cf51205f8bca97349a67c54df6125bc92b39b7008b390199119aa40b9dbd77516f8f71c94aa98f141f7263bfbf56ce8baed450aec1d5f16b6dda598038b0b14d2110", 0xba}], 0x1, &(0x7f00000004c0)=[{0x30, 0x103, 0x1, "d09494f408e7ed3a3c13e2e6753da5940cd7a9ba52b585d552ff6c7fc3"}, {0xa8, 0x1, 0x7, "06a63b32463ce4042f77c9fe5768ac35377051455f57bf32fe27201e3a7fef816a4e39ddaf605355237b12b2b762c51c4dec2f8891e76b00924e3859672c24c6f03956c40135d004d91a7fece5d0cb230ee4c5fe2ad09d87eaeed4e8a9f4d311fe81ef4f5a2b46db6ad0d37ac8a26682aed29a48432de8784280b84dea622e4fdba37879bcf806be29ad7213f1c3c9d5b93b"}, {0x1010, 0x116, 0x3, "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"}, {0x58, 0x10b, 0x9, "a58bcdd48669f2ceb478223279c670a1e7739e22bfa06f0107f075a051189499656e5b6e0377b76ec540e2d19b6e0ece00597a75ecbc494715e70b98d6634666078d41"}, {0x50, 0x102, 0x4, "43b4a9928bce636b7247557dfe9eb9fc0d4efc456770442c185e433fa769f5a2f5043bdc1cd496fd8c7bbf6af903eef7bcb620baf6ae15347a4b7087a1f9df"}, {0x18, 0x10e, 0x100, "512eea15fd8d3f15"}, {0xd0, 0x1, 0x1, "e4440e6660bb60c5309ca490d60d441286d54978403bdb0dab94d76abe0170f5b1a4e413bd98bbae4d88a79233678710a5cd17adb74ec17a437c4c2f9aca5918ea088c376f49b15ba2f3d816d3338e8f19088baf0061cea428651944303ca22e582bf7674a40dcf362383e1a229b4bde7417e46fb9bbba215f3a727c4e87cbe7b92f215bf84745d0380c65e6ae6f1003c72cc492b116319d9f417ca66ff177ce020c90ed48f63c114da2133391b3e502b177b97a34b89d5ee905f957be9536dc"}], 0x1278}, 0x8082) (async)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="78000000030601020000000000000000030000080900501acba1020073797a3000000000050001000700e4e32c8bb05fc35afc8e6cdf5bc373e400000900020073797af9000000000900020073797a3200000d000900020073797a3200000000050001000700000009000200000500010007000000050001000700f4ff05000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)

[ 1532.957320][T31494] loop2: detected capacity change from 0 to 264192
[ 1532.961764][T31497] loop4: detected capacity change from 0 to 140
[ 1532.970187][T31500] loop3: detected capacity change from 0 to 264192
[ 1532.975782][T22835]  loop3: unable to read partition table
[ 1532.982668][T31502] loop1: detected capacity change from 0 to 264192
[ 1532.985652][T23865]  loop1: unable to read partition table
04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000f8070400002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1533.012985][T31500] EXT4-fs (loop3): inodes count not valid: 786464 vs 32
[ 1533.020091][T31502] EXT4-fs (loop1): Invalid log cluster size: 262656
[ 1533.033773][T31497] EXT4-fs (loop4): invalid inodes per group: 218103840
[ 1533.033773][T31497] 
04:27:27 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x3bc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x254, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x240, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "64f4e5d49223ca6667288a4ecf9924814b4929191875c2b970ed07bc1654799005d974eda3e3fadad5698b37d2ee506c3e420de16bb0882cdc75b1c88a5a3c66668375a744122083523540feabaf14c79f35f6231c9d6b8e819115a9aba1c15502df9aa3d419aff1160e148f0412a4c2ff"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "ece84387ee95d73bbb4ee949f5bd8a062cf43e0c3237e2a759edb6bda35ef89ff617ec36705453ca822e08fe4ef0f9b6a481617f11f1960781216fbe8787e61b17f84ae2090facfb8cf1d60dd578f804229a21c439bb68acc5f1f44696cbd2446675b30cf3cfda962d879d3ab278d95cb9524913fcdc7da1c6dd4c9e355724a8772806aacc0a02bcb062615fe49281d50afd5d1b60c4665484c5bf3545b2ad1d59f1010a28f7a3cf41d1637a567c21517dd9b16103cc8d5acf3197e86fd8d814ac12e9de84cbf03c8b210cd579fd8cfe7831532b5b03abd9837c1784463b0928e4769fd8cae761a15cd6eb98c1e677"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x33df}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}]}, @NFTA_DATA_VALUE={0x32, 0x1, "36a033c9e7d9835c2c3c25a742534c7c985a570ca22dca0c16fb364813f83aaa7e34a5c920e5aafa448c284e3d01"}]}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x434}, 0x1, 0x0, 0x0, 0xc900}, 0x40090)

04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4788}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000d00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.060755][T31494] EXT4-fs (loop2): #blocks per group too big: 8273
[ 1533.079990][T31517] loop1: detected capacity change from 0 to 264192
[ 1533.092858][T31517] EXT4-fs (loop1): Invalid log cluster size: 264184
04:27:27 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000000ed7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002552000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000110000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000080400002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1533.108180][T31523] loop3: detected capacity change from 0 to 264192
[ 1533.115672][T31523] EXT4-fs (loop3): inodes count not valid: 852000 vs 32
04:27:27 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220004800d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4888}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1533.167046][T31525] loop4: detected capacity change from 0 to 140
[ 1533.172572][T31529] loop2: detected capacity change from 0 to 264192
[ 1533.179124][T31531] loop1: detected capacity change from 0 to 264192
[ 1533.204688][T31525] EXT4-fs (loop4): invalid inodes per group: 234881056
[ 1533.204688][T31525] 
04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000e00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x5865}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000000fd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000015c2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.219865][T31529] EXT4-fs (loop2): Invalid log cluster size: 33554432
[ 1533.231107][T31531] EXT4-fs (loop1): Invalid log cluster size: 264192
[ 1533.250602][T31539] loop3: detected capacity change from 0 to 264192
[ 1533.258713][T31539] EXT4-fs (loop3): inodes count not valid: 917536 vs 32
04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000040800002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000f00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.312559][T31551] loop1: detected capacity change from 0 to 264192
[ 1533.314493][T31547] loop4: detected capacity change from 0 to 140
[ 1533.330402][T31550] loop2: detected capacity change from 0 to 264192
[ 1533.331677][T23865]  loop2: unable to read partition table
[ 1533.342709][T31551] EXT4-fs (loop1): Invalid log cluster size: 525312
04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffff1f00002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001000090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000015e2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.361173][T31550] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1533.368541][T31553] loop3: detected capacity change from 0 to 264192
[ 1533.376245][T31553] EXT4-fs (loop3): inodes count not valid: 983072 vs 32
[ 1533.376579][T31547] EXT4-fs (loop4): invalid inodes per group: 251658272
[ 1533.376579][T31547] 
04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6000}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1533.434451][T31559] loop3: detected capacity change from 0 to 264192
[ 1533.444065][T31560] loop1: detected capacity change from 0 to 264192
[ 1533.464161][T31562] loop2: detected capacity change from 0 to 264192
[ 1533.464935][T31559] EXT4-fs (loop3): inodes count not valid: 1048608 vs 32
04:27:27 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000034010000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220007400d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000602000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000002000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:27 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000010d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.482250][T31562] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1533.491863][T31560] EXT4-fs (loop1): Invalid log cluster size: 2097151
04:27:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001100090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220740000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6558}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:27 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000002a20000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.556226][T31571] loop2: detected capacity change from 0 to 264192
[ 1533.560972][T31574] loop3: detected capacity change from 0 to 264192
[ 1533.571211][T31577] loop4: detected capacity change from 0 to 140
[ 1533.581354][T31572] loop1: detected capacity change from 0 to 264192
04:27:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x88480000, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1533.604818][T31577] EXT4-fs (loop4): invalid inodes per group: 268435488
[ 1533.604818][T31577] 
[ 1533.620794][T31571] EXT4-fs (loop2): #blocks per group too big: 8288
04:27:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001200090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000001642000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000011d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.647973][T31574] EXT4-fs (loop3): inodes count not valid: 1114144 vs 32
[ 1533.671720][T31572] EXT4-fs (loop1): Invalid log cluster size: 2097152
04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000004000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8100}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1533.715037][T31591] loop2: detected capacity change from 0 to 264192
[ 1533.717793][T31589] loop3: detected capacity change from 0 to 264192
[ 1533.735498][T31593] loop4: detected capacity change from 0 to 140
04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8847}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x39ba)

04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000682000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.763457][T31591] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1533.771112][T31597] loop1: detected capacity change from 0 to 264192
[ 1533.784623][T31589] EXT4-fs (loop3): inodes count not valid: 1179680 vs 32
[ 1533.791918][T31593] EXT4-fs (loop4): invalid inodes per group: 285212704
[ 1533.791918][T31593] 
04:27:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001400090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000012d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8848}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1533.877845][T31606] loop2: detected capacity change from 0 to 264192
[ 1533.885938][T31608] loop3: detected capacity change from 0 to 264192
[ 1533.894716][T31597] EXT4-fs (loop1): Invalid log cluster size: 4194304
[ 1533.896377][T31610] loop4: detected capacity change from 0 to 140
[ 1533.910680][T31608] EXT4-fs (loop3): inodes count not valid: 1310752 vs 32
[ 1533.919966][T31606] EXT4-fs (loop2): #blocks per group too big: 8296
04:27:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x1a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001600090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000008100002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000014d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.924833][T31610] EXT4-fs (loop4): invalid inodes per group: 301989920
[ 1533.924833][T31610] 
04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000006c2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1533.991707][T31616] loop3: detected capacity change from 0 to 264192
[ 1534.007844][T31622] loop2: detected capacity change from 0 to 264192
[ 1534.008951][T31621] loop1: detected capacity change from 0 to 264192
[ 1534.015760][T23865]  loop1: unable to read partition table
[ 1534.023691][T31620] loop4: detected capacity change from 0 to 140
[ 1534.034378][T31620] EXT4-fs (loop4): invalid inodes per group: 335544352
04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000009000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000022d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xc105}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000001002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000742000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.034378][T31620] 
[ 1534.044957][T31621] EXT4-fs (loop1): Invalid log cluster size: 8454144
[ 1534.056644][T31622] EXT4-fs (loop2): #blocks per group too big: 8300
[ 1534.066491][T31616] EXT4-fs (loop3): inodes count not valid: 1441824 vs 32
[ 1534.120146][T31633] loop1: detected capacity change from 0 to 264192
[ 1534.122035][T31632] loop4: detected capacity change from 0 to 140
[ 1534.140156][T31634] loop2: detected capacity change from 0 to 264192
[ 1534.156417][T31633] EXT4-fs (loop1): Invalid log cluster size: 16777216
04:27:28 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x2c}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000002002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001700090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000025d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.163882][T31632] EXT4-fs (loop4): invalid inodes per group: 570425376
[ 1534.163882][T31632] 
[ 1534.163967][T31634] EXT4-fs (loop2): #blocks per group too big: 8308
[ 1534.207170][T31639] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000000007a2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1534.259708][T31644] loop3: detected capacity change from 0 to 264192
[ 1534.265591][T31647] loop2: detected capacity change from 0 to 264192
[ 1534.266950][ T1437] blk_print_req_error: 23 callbacks suppressed
[ 1534.266961][ T1437] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1534.273922][T31642] loop4: detected capacity change from 0 to 140
[ 1534.278898][ T1437] buffer_io_error: 18 callbacks suppressed
[ 1534.278909][ T1437] Buffer I/O error on dev loop2, logical block 0, async page read
04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000ffffff8c2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.308410][T31645] loop1: detected capacity change from 0 to 264192
[ 1534.315153][T31642] EXT4-fs (loop4): invalid inodes per group: 620757024
[ 1534.315153][T31642] 
[ 1534.325468][T31645] EXT4-fs (loop1): Invalid log cluster size: 33554432
[ 1534.325552][T31644] EXT4-fs (loop3): inodes count not valid: 1507360 vs 32
[ 1534.343364][T31647] EXT4-fs (loop2): #blocks per group too big: 8314
04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x18}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000026d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000402002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x6, 0x201, 0x0, 0x2, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)

[ 1534.366381][T31652] loop2: detected capacity change from 0 to 264192
[ 1534.385465][T31652] EXT4-fs (loop2): Invalid log cluster size: 4294967040
[ 1534.400607][T31655] loop4: detected capacity change from 0 to 140
04:27:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001800090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.427217][T31659] loop1: detected capacity change from 0 to 264192
[ 1534.442673][T31655] EXT4-fs (loop4): invalid inodes per group: 637534240
[ 1534.442673][T31655] 
[ 1534.449420][T31663] loop3: detected capacity change from 0 to 264192
[ 1534.459999][T31659] EXT4-fs (loop1): Invalid log cluster size: 33816576
04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000982000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x28}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001b00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.471453][T31663] EXT4-fs (loop3): inodes count not valid: 1572896 vs 32
[ 1534.496997][T31667] loop2: detected capacity change from 0 to 264192
[ 1534.514150][T31667] EXT4-fs (loop2): #blocks per group too big: 8344
04:27:28 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000046d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:28 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000003002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:28 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002a22000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.545326][T31673] loop3: detected capacity change from 0 to 264192
[ 1534.568559][T31675] loop4: detected capacity change from 0 to 140
[ 1534.585710][T31678] loop1: detected capacity change from 0 to 264192
[ 1534.588663][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1534.597480][T31680] loop2: detected capacity change from 0 to 264192
[ 1534.601355][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1534.623971][T31680] EXT4-fs (loop2): Invalid log cluster size: 33554432
[ 1534.638374][T31675] EXT4-fs (loop4): invalid inodes per group: 1174405152
04:27:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0002, 0x28)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x11, r1, 0x1, 0x9}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x5, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x31, @mcast1}]}]}]}, 0x3c}}, 0x0)

04:27:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0002, 0x28)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x11, r1, 0x1, 0x9}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x5, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x31, @mcast1}]}]}]}, 0x3c}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0002, 0x28) (async)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x11, r1, 0x1, 0x9}, 0x14) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x5, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x31, @mcast1}]}]}]}, 0x3c}}, 0x0) (async)

[ 1534.638374][T31675] 
[ 1534.649242][T31673] EXT4-fs (loop3): inodes count not valid: 1769504 vs 32
[ 1534.658182][T31678] EXT4-fs (loop1): Invalid log cluster size: 50331648
04:27:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:29 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000048d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000001aa2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000004002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0002, 0x28)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x11, r1, 0x1, 0x9}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x5, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x31, @mcast1}]}]}]}, 0x3c}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0002, 0x28) (async)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x11, r1, 0x1, 0x9}, 0x14) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x5, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x31, @mcast1}]}]}]}, 0x3c}}, 0x0) (async)

[ 1534.741007][T31690] loop4: detected capacity change from 0 to 140
[ 1534.751379][T31693] loop1: detected capacity change from 0 to 264192
[ 1534.752737][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1534.767046][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1534.777030][T31688] __nla_validate_parse: 43 callbacks suppressed
04:27:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002200090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 0:
r0 = open(&(0x7f0000000280)='.\x00', 0x2049c0, 0x80)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x3, 0x8e, &(0x7f00000000c0)=""/142, 0x41000, 0x14, '\x00', 0x0, 0x12, r0, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x8}, 0x10, 0xffffffffffffffff, r0}, 0x80)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9})
ptrace$peeksig(0x4209, r2, &(0x7f0000000240)={0x0, 0x1}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, <r3=>0x0})
fcntl$setown(r1, 0x8, r3)
fcntl$notify(r0, 0x402, 0x8000002d)
poll(0x0, 0x0, 0x264)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

04:27:29 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000005002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1534.777052][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1534.779756][T31692] loop2: detected capacity change from 0 to 264192
[ 1534.801853][T31690] EXT4-fs (loop4): invalid inodes per group: 1207959584
[ 1534.801853][T31690] 
[ 1534.812783][T31692] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1534.822222][T31693] EXT4-fs (loop1): Invalid log cluster size: 67108864
[ 1534.826616][T31706] loop3: detected capacity change from 0 to 264192
04:27:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x2}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:29 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000ad2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000004cd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1534.854095][T31706] EXT4-fs (loop3): inodes count not valid: 2228256 vs 32
[ 1534.862324][T31712] loop1: detected capacity change from 0 to 264192
[ 1534.870556][T31712] EXT4-fs (loop1): Invalid log cluster size: 83886080
04:27:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002500090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000006002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1534.908716][T31716] loop2: detected capacity change from 0 to 264192
[ 1534.914341][T31718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1534.928196][T31720] loop4: detected capacity change from 0 to 140
[ 1534.932001][T31721] loop3: detected capacity change from 0 to 264192
[ 1534.947813][T31720] EXT4-fs (loop4): invalid inodes per group: 1275068448
[ 1534.947813][T31720] 
[ 1534.948493][T31716] EXT4-fs (loop2): #blocks per group too big: 8365
[ 1534.965612][T31721] EXT4-fs (loop3): inodes count not valid: 2424864 vs 32
[ 1534.975095][T31723] loop1: detected capacity change from 0 to 264192
[ 1534.978546][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1534.990871][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
04:27:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x3}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:29 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000b22000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002600090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000406002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:29 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000055d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1535.008699][T31723] EXT4-fs (loop1): Invalid log cluster size: 100663296
[ 1535.022426][T31726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1535.055919][T31729] loop3: detected capacity change from 0 to 264192
[ 1535.059389][T22835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1535.071626][T22835] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1535.073743][T31732] loop1: detected capacity change from 0 to 264192
[ 1535.081287][T31733] loop2: detected capacity change from 0 to 264192
[ 1535.092657][T31732] EXT4-fs (loop1): Invalid log cluster size: 100925440
[ 1535.103791][T31734] loop4: detected capacity change from 0 to 140
[ 1535.124268][T31729] EXT4-fs (loop3): inodes count not valid: 2490400 vs 32
[ 1535.125121][T31734] EXT4-fs (loop4): invalid inodes per group: 1426063392
[ 1535.125121][T31734] 
[ 1535.142882][T31733] EXT4-fs (loop2): #blocks per group too big: 8370
04:27:29 executing program 0:
r0 = open(&(0x7f0000000280)='.\x00', 0x2049c0, 0x80)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
setuid(0xee01) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x3, 0x8e, &(0x7f00000000c0)=""/142, 0x41000, 0x14, '\x00', 0x0, 0x12, r0, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x8}, 0x10, 0xffffffffffffffff, r0}, 0x80) (async)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0) (async)
rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) (async, rerun: 64)
ptrace$peeksig(0x4209, r2, &(0x7f0000000240)={0x0, 0x1}, 0x0) (async, rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, <r3=>0x0})
fcntl$setown(r1, 0x8, r3)
fcntl$notify(r0, 0x402, 0x8000002d) (async)
poll(0x0, 0x0, 0x264) (async)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

04:27:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20003000090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000007002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x4}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:29 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000003b62000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000060d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 0:
r0 = open(&(0x7f0000000280)='.\x00', 0x2049c0, 0x80)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x3, 0x8e, &(0x7f00000000c0)=""/142, 0x41000, 0x14, '\x00', 0x0, 0x12, r0, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x8}, 0x10, 0xffffffffffffffff, r0}, 0x80) (async)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0) (async)
rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9})
ptrace$peeksig(0x4209, r2, &(0x7f0000000240)={0x0, 0x1}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, <r3=>0x0})
fcntl$setown(r1, 0x8, r3) (async)
fcntl$notify(r0, 0x402, 0x8000002d)
poll(0x0, 0x0, 0x264) (async)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

[ 1535.475817][T31742] loop1: detected capacity change from 0 to 264192
[ 1535.477544][T31744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1535.484686][T31739] loop2: detected capacity change from 0 to 264192
[ 1535.498487][T31746] loop3: detected capacity change from 0 to 264192
[ 1535.509492][T31742] EXT4-fs (loop1): Invalid log cluster size: 117440512
[ 1535.512402][T31745] loop4: detected capacity change from 0 to 140
04:27:29 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000008002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1535.517786][T31739] EXT4-fs (loop2): Invalid log cluster size: 50331648
[ 1535.533025][T31746] EXT4-fs (loop3): inodes count not valid: 3145760 vs 32
[ 1535.543392][T31745] EXT4-fs (loop4): invalid inodes per group: 1610612768
[ 1535.543392][T31745] 
04:27:29 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000068d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20003200090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:29 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000003be2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1535.574717][T31763] loop1: detected capacity change from 0 to 264192
[ 1535.576251][T31764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1535.594260][T31763] EXT4-fs (loop1): Invalid log cluster size: 134217728
04:27:30 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000009002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1535.630730][T31767] loop3: detected capacity change from 0 to 264192
[ 1535.638805][T31770] loop4: detected capacity change from 0 to 140
[ 1535.650854][T31771] loop2: detected capacity change from 0 to 264192
[ 1535.651066][T23865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1535.666497][T23865] Buffer I/O error on dev loop2, logical block 0, async page read
04:27:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x6}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1535.686760][T31770] EXT4-fs (loop4): invalid inodes per group: 1744830496
[ 1535.686760][T31770] 
[ 1535.688797][T31773] loop1: detected capacity change from 0 to 264192
[ 1535.707872][T31767] EXT4-fs (loop3): inodes count not valid: 3276832 vs 32
[ 1535.715970][T31775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1535.725914][T31771] EXT4-fs (loop2): Invalid log cluster size: 50331648
04:27:30 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000006cd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20003e00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000109002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1535.732753][T31773] EXT4-fs (loop1): Invalid log cluster size: 150994944
04:27:30 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000001c02000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1535.787621][T31780] loop1: detected capacity change from 0 to 264192
[ 1535.788918][T31781] loop3: detected capacity change from 0 to 264192
[ 1535.795415][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1535.806136][T31782] loop4: detected capacity change from 0 to 140
[ 1535.809860][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1535.816335][T31780] EXT4-fs (loop1): Invalid log cluster size: 151060480
[ 1535.832383][T31781] EXT4-fs (loop3): inodes count not valid: 4063264 vs 32
[ 1535.833514][T31784] loop2: detected capacity change from 0 to 264192
[ 1535.845817][T31782] EXT4-fs (loop4): invalid inodes per group: 1811939360
[ 1535.845817][T31782] 
[ 1535.855795][T31784] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1535.907553][T22835] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1535.908313][T23865] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1535.916665][T22835] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1535.935100][T22837] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1535.947176][T22835] Buffer I/O error on dev loop4, logical block 2, async page read
[ 1535.955773][T22835] Buffer I/O error on dev loop4, logical block 3, async page read
04:27:30 executing program 0:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

04:27:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x7}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:30 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000000a002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004600090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002c42000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000074d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1536.173117][T31792] loop1: detected capacity change from 0 to 264192
[ 1536.175385][T31795] loop4: detected capacity change from 0 to 140
[ 1536.180148][T31791] loop3: detected capacity change from 0 to 264192
[ 1536.192958][T31794] loop2: detected capacity change from 0 to 264192
[ 1536.200677][T31795] EXT4-fs (loop4): invalid inodes per group: 1946157088
[ 1536.200677][T31795] 
[ 1536.213424][T31796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:30 executing program 0:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f0000000140)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)

04:27:30 executing program 0:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f0000000140)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf670000000000006202000007ff07ada406000002000000070600000ee60000bf250000000000006335000000000000650700000200000007070000000000001f75000000000000bf54000000000000160400000400f9ffad300100000000008400000000000000050000000000000095000000000000006e8ad524a56601a5984e4dc87ca658e5f2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2c002046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0043018ae79db611d6aec070f718ab629b4975320dd7a7da532281fd22c7b8350084452715396669836db6000000005b4f0591ee7cd5daf2cdc50d99e2d6a3e76d5d83600662ad3d1aab74a2f078aa64ae483856a6e494408d0b33047f06b922195a271af103f03e1155197e067b2ebf4e2dae460959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e5fe8acdf2b9a45a38d88a0b47f4559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346909675b5b0f352e30dffda780e95c301f4fc7d55bde2259b616d5a76475ac7a7da87d34c595b947dc5cace6b128b02bfd79023daffdf748a6bd356fcba6ec96373d1101006e36db0bbcb5f4836bddfe8bf463241037a4ade9e562cf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e444ee55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788d96bf18b740f77321e2c6e601b50777e8dff581de1d5ac9ef01ead7eba31126e2172fa1eadf5f3bec7bb54d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1dd511ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97f83d626efb9c1813dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6ea82b476dec5a9a668c115182b1955aaf78c8632ea3994a"], &(0x7f0000000100)='GPL\x00'}, 0x48)

04:27:30 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x6)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc284}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettaction={0x10c, 0x32, 0x308, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

04:27:30 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000007ad7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004800090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1536.213476][T31794] EXT4-fs (loop2): Invalid log cluster size: 33554432
[ 1536.234774][T31792] EXT4-fs (loop1): Invalid log cluster size: 167772160
[ 1536.242716][T31791] EXT4-fs (loop3): inodes count not valid: 4587552 vs 32
04:27:30 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x6)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc284}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettaction={0x10c, 0x32, 0x308, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
socket$unix(0x1, 0x5, 0x0) (async)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
close(r0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x6) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc284}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettaction={0x10c, 0x32, 0x308, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async)

04:27:30 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000cb2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:30 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000000b002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1536.307619][T31810] loop3: detected capacity change from 0 to 264192
[ 1536.308906][T31808] loop4: detected capacity change from 0 to 140
[ 1536.336395][T31824] loop1: detected capacity change from 0 to 264192
[ 1536.345388][T31810] EXT4-fs (loop3): inodes count not valid: 4718624 vs 32
04:27:30 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendfile(r3, r2, &(0x7f0000000080)=0x6, 0x6) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc284}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettaction={0x10c, 0x32, 0x308, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

04:27:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004c00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x4, 0x2, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @loopback}}}]}, @CTA_EXPECT_MASTER={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))

[ 1536.353343][T31825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1536.366512][T31827] loop2: detected capacity change from 0 to 264192
[ 1536.383723][T31824] EXT4-fs (loop1): Invalid log cluster size: 184549376
[ 1536.397451][T31836] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
04:27:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20005100090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000000c002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x4, 0x2, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @loopback}}}]}, @CTA_EXPECT_MASTER={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x4, 0x2, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @loopback}}}]}, @CTA_EXPECT_MASTER={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}}, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async)

[ 1536.417554][T31827] EXT4-fs (loop2): #blocks per group too big: 8395
[ 1536.438490][T31840] loop3: detected capacity change from 0 to 264192
[ 1536.441720][T23865]  loop3: unable to read partition table
[ 1536.465892][T31844] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1536.466348][T31808] EXT4-fs (loop4): invalid inodes per group: 2046820384
[ 1536.466348][T31808] 
[ 1536.488351][T31843] loop1: detected capacity change from 0 to 264192
[ 1536.489232][T22835]  loop1: unable to read partition table
[ 1536.505704][T31840] EXT4-fs (loop3): inodes count not valid: 5308448 vs 32
04:27:30 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000084d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:30 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000003ce2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x4, 0x2, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @loopback}}}]}, @CTA_EXPECT_MASTER={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))

04:27:30 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20005500090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:30 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000000d002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1536.508806][T31843] EXT4-fs (loop1): Invalid log cluster size: 201326592
04:27:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x74}}, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010001100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004001980146f5f62726964676500"/32], 0x38}}, 0x0)

[ 1536.571046][T31853] loop2: detected capacity change from 0 to 264192
[ 1536.574093][T31854] loop3: detected capacity change from 0 to 264192
[ 1536.594851][T31859] loop4: detected capacity change from 0 to 140
[ 1536.605985][T31860] loop1: detected capacity change from 0 to 264192
04:27:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xa}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x74}}, 0x0) (async)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010001100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004001980146f5f62726964676500"/32], 0x38}}, 0x0)

04:27:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x74}}, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010001100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004001980146f5f62726964676500"/32], 0x38}}, 0x0) (rerun: 32)

04:27:31 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000d02000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1536.618824][T31853] EXT4-fs (loop2): Invalid log cluster size: 50331648
[ 1536.630230][T31860] EXT4-fs (loop1): Invalid log cluster size: 218103808
[ 1536.637755][T31859] EXT4-fs (loop4): invalid inodes per group: 2214592544
[ 1536.637755][T31859] 
[ 1536.638830][T31854] EXT4-fs (loop3): inodes count not valid: 5570592 vs 32
04:27:31 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000000e002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:31 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f00000001000000000000000000000000200000002000022000008cd7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006000090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1536.706341][T31873] loop2: detected capacity change from 0 to 264192
[ 1536.728586][T31879] loop1: detected capacity change from 0 to 264192
[ 1536.729097][T31880] loop3: detected capacity change from 0 to 264192
[ 1536.747723][T31873] EXT4-fs (loop2): #blocks per group too big: 8400
04:27:31 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000d32000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002d62000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xb}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1536.754751][T31882] loop4: detected capacity change from 0 to 140
[ 1536.763729][T31879] EXT4-fs (loop1): Invalid log cluster size: 234881024
[ 1536.783621][T31882] EXT4-fs (loop4): invalid inodes per group: 2348810272
[ 1536.783621][T31882] 
[ 1536.792984][T31880] EXT4-fs (loop3): inodes count not valid: 6291488 vs 32
04:27:31 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000000f002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x2000000003, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @private=0xa010102, 0x1, 0x4, [@private=0xa010100, @private=0xa010102, @multicast1, @loopback]}, 0x20)
sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="24000000260007031dfffd866fa28300202002acb43b76479d3b70490dee64f315cd0000", 0x17}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r4, 0x10d, 0x85, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @broadcast, @remote}, &(0x7f00000004c0)=0xc)
listen(r3, 0x3)
pipe(&(0x7f0000000e80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x19, 0x0, "4a4f34f7fefb7ad7df8057870f7e75e848d1179a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35016f", "8e73c3333672b956a7bd8fa647583ca3a33c00", [0x3f, 0x8001]})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', <r7=>0x0, 0x40, 0x80, 0x4, 0x5, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x16, 0x3, [{0x5, 0x8, "44dc79189ccf"}, {0x7, 0x8, "efacc30e8c57"}]}, @rr={0x7, 0x23, 0x70, [@remote, @loopback, @loopback, @remote, @local, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0x17, 0xb1, [@dev={0xac, 0x14, 0x14, 0x3c}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800010107000000ffdbdf25020000002000000008000500", @ANYRES32=r7, @ANYBLOB="3cac1b2620273e5b25a281a1d38b5a8c0b718ecfef32e7aa5a8dab57e43e00fff0cc7acc4e987bd0342d5c7c15332ba3e018d2b704ed05db8e39da335e2ad54dd45e34e880f89c16eacea4f34e551a7e3f"], 0x20}, 0x1, 0x0, 0x0, 0x4000860}, 0x3affa3892e306a7f)
recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0xf, 0x3c0e, 0x0)

04:27:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006600090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f0000000100000000000000000000000020000000200002200000fed7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1536.872371][   T24] audit: type=1400 audit(1661747251.239:1003): avc:  denied  { connect } for  pid=31890 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1536.874822][T31894] loop4: detected capacity change from 0 to 140
[ 1536.894014][ T1437]  loop4: unable to read partition table
[ 1536.906179][T31897] loop1: detected capacity change from 0 to 264192
[ 1536.909594][T31892] loop2: detected capacity change from 0 to 264192
04:27:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1536.922439][T31898] loop3: detected capacity change from 0 to 264192
[ 1536.924151][T31897] EXT4-fs (loop1): Invalid log cluster size: 251658240
[ 1536.932816][   T24] audit: type=1400 audit(1661747251.259:1004): avc:  denied  { getopt } for  pid=31890 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1536.959039][T31894] EXT4-fs (loop4): invalid inodes per group: 4261412896
[ 1536.959039][T31894] 
04:27:31 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000010002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xf}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1536.971302][T31892] EXT4-fs (loop2): Invalid log cluster size: 33554432
[ 1536.992123][T31898] EXT4-fs (loop3): inodes count not valid: 6684704 vs 32
04:27:31 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f40a5fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000ffffffda2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1537.034797][T31902] loop1: detected capacity change from 0 to 264192
[ 1537.071184][T31906] loop4: detected capacity change from 0 to 140
04:27:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006800090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x10}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1537.080071][T31908] loop2: detected capacity change from 0 to 264192
[ 1537.080153][T31902] EXT4-fs (loop1): Invalid log cluster size: 268435456
[ 1537.100830][T31908] EXT4-fs (loop2): Invalid log cluster size: 4294967040
[ 1537.107912][T31906] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1537.108054][T31911] loop3: detected capacity change from 0 to 264192
04:27:31 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000dc2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:31 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006c00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1537.129493][T31911] EXT4-fs (loop3): inodes count not valid: 6815776 vs 32
[ 1537.186762][T31917] loop2: detected capacity change from 0 to 264192
[ 1537.189947][T31918] loop3: detected capacity change from 0 to 264192
[ 1537.196714][T23865]  loop3: unable to read partition table
[ 1537.210017][T31917] EXT4-fs (loop2): #blocks per group too big: 8412
[ 1537.211960][T31918] EXT4-fs (loop3): inodes count not valid: 7077920 vs 32
04:27:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x2000000003, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @private=0xa010102, 0x1, 0x4, [@private=0xa010100, @private=0xa010102, @multicast1, @loopback]}, 0x20)
sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="24000000260007031dfffd866fa28300202002acb43b76479d3b70490dee64f315cd0000", 0x17}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r4, 0x10d, 0x85, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @broadcast, @remote}, &(0x7f00000004c0)=0xc)
listen(r3, 0x3)
pipe(&(0x7f0000000e80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x19, 0x0, "4a4f34f7fefb7ad7df8057870f7e75e848d1179a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35016f", "8e73c3333672b956a7bd8fa647583ca3a33c00", [0x3f, 0x8001]})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', <r7=>0x0, 0x40, 0x80, 0x4, 0x5, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x16, 0x3, [{0x5, 0x8, "44dc79189ccf"}, {0x7, 0x8, "efacc30e8c57"}]}, @rr={0x7, 0x23, 0x70, [@remote, @loopback, @loopback, @remote, @local, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0x17, 0xb1, [@dev={0xac, 0x14, 0x14, 0x3c}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800010107000000ffdbdf25020000002000000008000500", @ANYRES32=r7, @ANYBLOB="3cac1b2620273e5b25a281a1d38b5a8c0b718ecfef32e7aa5a8dab57e43e00fff0cc7acc4e987bd0342d5c7c15332ba3e018d2b704ed05db8e39da335e2ad54dd45e34e880f89c16eacea4f34e551a7e3f"], 0x20}, 0x1, 0x0, 0x0, 0x4000860}, 0x3affa3892e306a7f)
recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0xf, 0x3c0e, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async)
socket$inet(0x10, 0x2000000003, 0x0) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @private=0xa010102, 0x1, 0x4, [@private=0xa010100, @private=0xa010102, @multicast1, @loopback]}, 0x20) (async)
sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="24000000260007031dfffd866fa28300202002acb43b76479d3b70490dee64f315cd0000", 0x17}], 0x1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) (async)
socket$inet_dccp(0x2, 0x6, 0x0) (async)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) (async)
getsockopt$inet_int(r4, 0x10d, 0x85, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @broadcast, @remote}, &(0x7f00000004c0)=0xc) (async)
listen(r3, 0x3) (async)
pipe(&(0x7f0000000e80)) (async)
splice(r5, 0x0, r6, 0x0, 0x2, 0x0) (async)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x19, 0x0, "4a4f34f7fefb7ad7df8057870f7e75e848d1179a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35016f", "8e73c3333672b956a7bd8fa647583ca3a33c00", [0x3f, 0x8001]}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x40, 0x80, 0x4, 0x5, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x16, 0x3, [{0x5, 0x8, "44dc79189ccf"}, {0x7, 0x8, "efacc30e8c57"}]}, @rr={0x7, 0x23, 0x70, [@remote, @loopback, @loopback, @remote, @local, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0x17, 0xb1, [@dev={0xac, 0x14, 0x14, 0x3c}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}}) (async)
sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800010107000000ffdbdf25020000002000000008000500", @ANYRES32=r7, @ANYBLOB="3cac1b2620273e5b25a281a1d38b5a8c0b718ecfef32e7aa5a8dab57e43e00fff0cc7acc4e987bd0342d5c7c15332ba3e018d2b704ed05db8e39da335e2ad54dd45e34e880f89c16eacea4f34e551a7e3f"], 0x20}, 0x1, 0x0, 0x0, 0x4000860}, 0x3affa3892e306a7f) (async)
recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0xf, 0x3c0e, 0x0) (async)

04:27:32 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000410002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:32 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4225fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007400090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x11}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000001de2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1537.705506][T31928] loop2: detected capacity change from 0 to 264192
[ 1537.714106][T31929] loop1: detected capacity change from 0 to 264192
[ 1537.721721][T31930] loop4: detected capacity change from 0 to 140
[ 1537.730075][T31930] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1537.733392][T31931] loop3: detected capacity change from 0 to 264192
[ 1537.746188][T31929] EXT4-fs (loop1): Invalid log cluster size: 268697600
04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x60}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async)
r2 = socket$inet(0x10, 0x2000000003, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @private=0xa010102, 0x1, 0x4, [@private=0xa010100, @private=0xa010102, @multicast1, @loopback]}, 0x20) (async, rerun: 32)
sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="24000000260007031dfffd866fa28300202002acb43b76479d3b70490dee64f315cd0000", 0x17}], 0x1}, 0x0) (rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) (async)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) (async)
getsockopt$inet_int(r4, 0x10d, 0x85, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @broadcast, @remote}, &(0x7f00000004c0)=0xc) (async, rerun: 32)
listen(r3, 0x3)
pipe(&(0x7f0000000e80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x19, 0x0, "4a4f34f7fefb7ad7df8057870f7e75e848d1179a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35016f", "8e73c3333672b956a7bd8fa647583ca3a33c00", [0x3f, 0x8001]}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', <r7=>0x0, 0x40, 0x80, 0x4, 0x5, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x16, 0x3, [{0x5, 0x8, "44dc79189ccf"}, {0x7, 0x8, "efacc30e8c57"}]}, @rr={0x7, 0x23, 0x70, [@remote, @loopback, @loopback, @remote, @local, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0x17, 0xb1, [@dev={0xac, 0x14, 0x14, 0x3c}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}})
sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800010107000000ffdbdf25020000002000000008000500", @ANYRES32=r7, @ANYBLOB="3cac1b2620273e5b25a281a1d38b5a8c0b718ecfef32e7aa5a8dab57e43e00fff0cc7acc4e987bd0342d5c7c15332ba3e018d2b704ed05db8e39da335e2ad54dd45e34e880f89c16eacea4f34e551a7e3f"], 0x20}, 0x1, 0x0, 0x0, 0x4000860}, 0x3affa3892e306a7f) (async)
recvmmsg(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0xf, 0x3c0e, 0x0)

04:27:32 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xb, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000001020102000000000073697000480821ed6e69b4a44b56d7a2f48e0003800c000280050001003a404c189aa37a0000002c000180140003000000000000000000000000000000000114000400000000000000000000000000000000000c00028005000100110000000a000600512e39333100f6000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

04:27:32 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000011002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:32 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4255fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002de2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1537.756418][T31928] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1537.763315][T31931] EXT4-fs (loop3): inodes count not valid: 7602208 vs 32
04:27:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20007a00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xb, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000001020102000000000073697000480821ed6e69b4a44b56d7a2f48e0003800c000280050001003a404c189aa37a0000002c000180140003000000000000000000000000000000000114000400000000000000000000000000000000000c00028005000100110000000a000600512e39333100f6000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) (async)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xb, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000001020102000000000073697000480821ed6e69b4a44b56d7a2f48e0003800c000280050001003a404c189aa37a0000002c000180140003000000000000000000000000000000000114000400000000000000000000000000000000000c00028005000100110000000a000600512e39333100f6000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)

[ 1537.832701][T31965] loop1: detected capacity change from 0 to 264192
[ 1537.833003][T31966] loop4: detected capacity change from 0 to 140
[ 1537.841807][T31968] loop3: detected capacity change from 0 to 264192
[ 1537.848996][T31969] loop2: detected capacity change from 0 to 264192
04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xb, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000001020102000000000073697000480821ed6e69b4a44b56d7a2f48e0003800c000280050001003a404c189aa37a0000002c000180140003000000000000000000000000000000000114000400000000000000000000000000000000000c00028005000100110000000a000600512e39333100f6000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) (async)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xb, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000001020102000000000073697000480821ed6e69b4a44b56d7a2f48e0003800c000280050001003a404c189aa37a0000002c000180140003000000000000000000000000000000000114000400000000000000000000000000000000000c00028005000100110000000a000600512e39333100f6000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)

[ 1537.878071][T31966] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1537.890284][T31965] EXT4-fs (loop1): Invalid log cluster size: 285212672
04:27:32 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x2, 0xff, 0x80, 0x5, 0x0, 0x7, 0x8080, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6})
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1}}], 0x1, 0x2041, 0x0)
sched_getscheduler(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x81}, @ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf4f4}]}, &(0x7f0000000140)='GPL\x00', 0xd9e8, 0x9e, &(0x7f0000000380)=""/158, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xa00000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xed0f0000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000001e02000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x2, 0xff, 0x80, 0x5, 0x0, 0x7, 0x8080, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1}}], 0x1, 0x2041, 0x0) (async)
sched_getscheduler(0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x81}, @ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf4f4}]}, &(0x7f0000000140)='GPL\x00', 0xd9e8, 0x9e, &(0x7f0000000380)=""/158, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xa00000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
time(&(0x7f0000000180)) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xed0f0000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f42c5fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1537.923693][T31969] EXT4-fs (loop2): Invalid log cluster size: 33554432
[ 1537.948719][T31968] EXT4-fs (loop3): inodes count not valid: 7995424 vs 32
04:27:32 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000012002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x500}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20008600090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x2, 0xff, 0x80, 0x5, 0x0, 0x7, 0x8080, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6})
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1}}], 0x1, 0x2041, 0x0)
sched_getscheduler(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x81}, @ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf4f4}]}, &(0x7f0000000140)='GPL\x00', 0xd9e8, 0x9e, &(0x7f0000000380)=""/158, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xa00000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xed0f0000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x3, 0x80, 0x2, 0xff, 0x80, 0x5, 0x0, 0x7, 0x8080, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/176, 0xb0}], 0x1}}], 0x1, 0x2041, 0x0) (async)
sched_getscheduler(0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x81}, @ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf4f4}]}, &(0x7f0000000140)='GPL\x00', 0xd9e8, 0x9e, &(0x7f0000000380)=""/158, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xa00000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
time(&(0x7f0000000180)) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xed0f0000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) (async)

[ 1538.002690][T31989] loop2: detected capacity change from 0 to 264192
[ 1538.024662][T31998] loop4: detected capacity change from 0 to 140
[ 1538.025728][T23865]  loop4: unable to read partition table
[ 1538.053278][T32001] loop1: detected capacity change from 0 to 264192
[ 1538.061772][T31989] EXT4-fs (loop2): Invalid log cluster size: 16777216
[ 1538.061883][T32004] loop3: detected capacity change from 0 to 264192
[ 1538.079159][T32001] EXT4-fs (loop1): Invalid log cluster size: 301989888
[ 1538.086405][T31998] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:32 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x59, 0x83, &(0x7f0000000380)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1ae2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x8, 0x7, 0x9}, 0x10}, 0x80)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x1c0, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=<r6=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="c84ba630abe3aad17523dba2d4f4969f965b2f88216990ed62755276810fba005296a25892100bbe7710183d0e3057aaa1da04a7423c392b29e319f885e2f3cf14e7039a368fd11f1fac246a0817f5c061a68cd79d64c8a8841e046fc2dc6dbef6a98bdd7729895a4b1155263f84ff80955f25c07884237cdca6f20515092dba24ec0ea55cf3edfaaf992eed886e3b894f859ddfed2ae12e80c79d234bdf904ce3ab9a0b48", 0xa5}, {&(0x7f0000000200)="4db74db0472b5f0d8bb7fbd6822aa1666555a39517df22cfcac930c3184f51bf842844f4b6d8d800", 0x28}, {&(0x7f0000000240)="4de4e64f7273dfa2000f2c20a0b68cb06b15a79f6e45736371366bbbdcce94d2035e0c", 0x23}], 0x3, &(0x7f0000000740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x1}, 0x20044040)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0)

04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x5c1}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000ffffffe22000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1538.097896][T32004] EXT4-fs (loop3): inodes count not valid: 8781856 vs 32
04:27:32 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000014002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:32 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f40a5f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x59, 0x83, &(0x7f0000000380)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1ae2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x8, 0x7, 0x9}, 0x10}, 0x80)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x1c0, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=<r6=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="c84ba630abe3aad17523dba2d4f4969f965b2f88216990ed62755276810fba005296a25892100bbe7710183d0e3057aaa1da04a7423c392b29e319f885e2f3cf14e7039a368fd11f1fac246a0817f5c061a68cd79d64c8a8841e046fc2dc6dbef6a98bdd7729895a4b1155263f84ff80955f25c07884237cdca6f20515092dba24ec0ea55cf3edfaaf992eed886e3b894f859ddfed2ae12e80c79d234bdf904ce3ab9a0b48", 0xa5}, {&(0x7f0000000200)="4db74db0472b5f0d8bb7fbd6822aa1666555a39517df22cfcac930c3184f51bf842844f4b6d8d800", 0x28}, {&(0x7f0000000240)="4de4e64f7273dfa2000f2c20a0b68cb06b15a79f6e45736371366bbbdcce94d2035e0c", 0x23}], 0x3, &(0x7f0000000740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x1}, 0x20044040)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x59, 0x83, &(0x7f0000000380)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1ae2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x8, 0x7, 0x9}, 0x10}, 0x80) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x1c0, 0x0) (async)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) (async)
socket$caif_stream(0x25, 0x1, 0x3) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="c84ba630abe3aad17523dba2d4f4969f965b2f88216990ed62755276810fba005296a25892100bbe7710183d0e3057aaa1da04a7423c392b29e319f885e2f3cf14e7039a368fd11f1fac246a0817f5c061a68cd79d64c8a8841e046fc2dc6dbef6a98bdd7729895a4b1155263f84ff80955f25c07884237cdca6f20515092dba24ec0ea55cf3edfaaf992eed886e3b894f859ddfed2ae12e80c79d234bdf904ce3ab9a0b48", 0xa5}, {&(0x7f0000000200)="4db74db0472b5f0d8bb7fbd6822aa1666555a39517df22cfcac930c3184f51bf842844f4b6d8d800", 0x28}, {&(0x7f0000000240)="4de4e64f7273dfa2000f2c20a0b68cb06b15a79f6e45736371366bbbdcce94d2035e0c", 0x23}], 0x3, &(0x7f0000000740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x1}, 0x20044040) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) (async)

04:27:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20009000090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1538.133773][T32018] loop2: detected capacity change from 0 to 264192
[ 1538.141539][T32018] EXT4-fs (loop2): Invalid log cluster size: 4294967040
04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x600}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000ea2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1538.184197][T32035] loop4: detected capacity change from 0 to 140
[ 1538.186604][ T1437]  loop4: unable to read partition table
[ 1538.201641][T32036] loop3: detected capacity change from 0 to 264192
[ 1538.210664][T32039] loop1: detected capacity change from 0 to 264192
04:27:32 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x59, 0x83, &(0x7f0000000380)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x1ae2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x8, 0x7, 0x9}, 0x10}, 0x80) (async)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x1c0, 0x0) (async)
r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) (async)
r4 = socket$caif_stream(0x25, 0x1, 0x3) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=<r6=>0x0) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) (async)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="c84ba630abe3aad17523dba2d4f4969f965b2f88216990ed62755276810fba005296a25892100bbe7710183d0e3057aaa1da04a7423c392b29e319f885e2f3cf14e7039a368fd11f1fac246a0817f5c061a68cd79d64c8a8841e046fc2dc6dbef6a98bdd7729895a4b1155263f84ff80955f25c07884237cdca6f20515092dba24ec0ea55cf3edfaaf992eed886e3b894f859ddfed2ae12e80c79d234bdf904ce3ab9a0b48", 0xa5}, {&(0x7f0000000200)="4db74db0472b5f0d8bb7fbd6822aa1666555a39517df22cfcac930c3184f51bf842844f4b6d8d800", 0x28}, {&(0x7f0000000240)="4de4e64f7273dfa2000f2c20a0b68cb06b15a79f6e45736371366bbbdcce94d2035e0c", 0x23}], 0x3, &(0x7f0000000740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x1}, 0x20044040) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0)

[ 1538.227306][T32035] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c001d00000000000100cf2a0e1f0000bcb6993426277749dcfbda14454e16be5ebe0de6cbd172f84d5c381b47dffce44dee3ef17baf6a00b79f3bf62288f8bc41f19b6ccb18a9737615ec9071455f526a1090ad379f5af65881bf5d658aec04d51441ec8a693675def142d78e0b0c61e03c21352b59b7c1491e51eb094beaa02892effccd067e6451f453", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e8000000000200010000000100000090de4a6ce7c04d6269f1cf1a3d679a16da40c5fdd78a5402a6f63714337128ed1c4f0e8e0b74ad35dfec296b2cf872518ffbf3ee1280c8329da2ffbb7ebbec154c28c89ce0d0d58a8c91bdd0ee18e208", @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad07a03633ed65a86f856e6ec8421e86ec40c486e7452c5ec96c35dfbdea7661d86837bdaa238450a66c6a78959eb3d216fe", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="00eb007e801bdf020000593633229d9af0e2b3342813288872000001000000020000002dcc11ad4298c947c1d6e51a6b55a39cd16441e96661d1344f5c3fc7ac3c0d46de41e9c45653658682aad99c6f5390b25398d9ce7ddb7fda152f7b56fd834f378f7606dc281f71697d69485fc15b117ef8ec9f48794a15d219afb5b5ba3fda9f22559743f05a9e8fa344c32bc4f6cddc83b32846a3ba13702c26156990136a3c2f0a72f653327f350bbb6abb79b80279b1", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x98, 0x20024084}}], 0x1, 0x20040000)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x8, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0xfd00, 0xd7ff, 0x400})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "285cbe607ecdfb"})

04:27:32 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4225f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1538.259938][T32036] EXT4-fs (loop3): inodes count not valid: 9437216 vs 32
[ 1538.269419][T32048] loop2: detected capacity change from 0 to 264192
04:27:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x700}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:32 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000ec2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:32 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20009a00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1538.311802][T32048] EXT4-fs (loop2): #blocks per group too big: 8426
[ 1538.324031][T32039] EXT4-fs (loop1): Invalid log cluster size: 335544320
[ 1538.337760][T32054] loop4: detected capacity change from 0 to 140
[ 1538.349530][T32054] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1538.423350][T32061] loop3: detected capacity change from 0 to 264192
[ 1538.463074][T32061] EXT4-fs (loop3): inodes count not valid: 10092576 vs 32
04:27:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x900}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:33 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffff02000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4255f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f100090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000018002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1538.711461][T32068] loop3: detected capacity change from 0 to 264192
[ 1538.719733][T32069] loop2: detected capacity change from 0 to 264192
[ 1538.729206][T32070] loop4: detected capacity change from 0 to 140
[ 1538.736506][T32072] loop1: detected capacity change from 0 to 264192
[ 1538.744600][T32069] EXT4-fs (loop2): Invalid log cluster size: 4294967040
[ 1538.752237][T32068] EXT4-fs (loop3): inodes count not valid: 15794208 vs 32
04:27:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fe00090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xa00}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1538.755769][T32070] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1538.763060][T32072] EXT4-fs (loop1): Invalid log cluster size: 402653184
04:27:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c001d00000000000100cf2a0e1f0000bcb6993426277749dcfbda14454e16be5ebe0de6cbd172f84d5c381b47dffce44dee3ef17baf6a00b79f3bf62288f8bc41f19b6ccb18a9737615ec9071455f526a1090ad379f5af65881bf5d658aec04d51441ec8a693675def142d78e0b0c61e03c21352b59b7c1491e51eb094beaa02892effccd067e6451f453", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e8000000000200010000000100000090de4a6ce7c04d6269f1cf1a3d679a16da40c5fdd78a5402a6f63714337128ed1c4f0e8e0b74ad35dfec296b2cf872518ffbf3ee1280c8329da2ffbb7ebbec154c28c89ce0d0d58a8c91bdd0ee18e208", @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad07a03633ed65a86f856e6ec8421e86ec40c486e7452c5ec96c35dfbdea7661d86837bdaa238450a66c6a78959eb3d216fe", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="00eb007e801bdf020000593633229d9af0e2b3342813288872000001000000020000002dcc11ad4298c947c1d6e51a6b55a39cd16441e96661d1344f5c3fc7ac3c0d46de41e9c45653658682aad99c6f5390b25398d9ce7ddb7fda152f7b56fd834f378f7606dc281f71697d69485fc15b117ef8ec9f48794a15d219afb5b5ba3fda9f22559743f05a9e8fa344c32bc4f6cddc83b32846a3ba13702c26156990136a3c2f0a72f653327f350bbb6abb79b80279b1", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x98, 0x20024084}}], 0x1, 0x20040000) (async)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x8, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0xfd00, 0xd7ff, 0x400}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "285cbe607ecdfb"})

04:27:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000901090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffff62000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f42c5f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xb00}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:33 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000001b002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) (async)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c001d00000000000100cf2a0e1f0000bcb6993426277749dcfbda14454e16be5ebe0de6cbd172f84d5c381b47dffce44dee3ef17baf6a00b79f3bf62288f8bc41f19b6ccb18a9737615ec9071455f526a1090ad379f5af65881bf5d658aec04d51441ec8a693675def142d78e0b0c61e03c21352b59b7c1491e51eb094beaa02892effccd067e6451f453", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e8000000000200010000000100000090de4a6ce7c04d6269f1cf1a3d679a16da40c5fdd78a5402a6f63714337128ed1c4f0e8e0b74ad35dfec296b2cf872518ffbf3ee1280c8329da2ffbb7ebbec154c28c89ce0d0d58a8c91bdd0ee18e208", @ANYBLOB="6e7f6a165f3cff56ec5958a799319ce38ed9c24828b7998212ad07a03633ed65a86f856e6ec8421e86ec40c486e7452c5ec96c35dfbdea7661d86837bdaa238450a66c6a78959eb3d216fe", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="00eb007e801bdf020000593633229d9af0e2b3342813288872000001000000020000002dcc11ad4298c947c1d6e51a6b55a39cd16441e96661d1344f5c3fc7ac3c0d46de41e9c45653658682aad99c6f5390b25398d9ce7ddb7fda152f7b56fd834f378f7606dc281f71697d69485fc15b117ef8ec9f48794a15d219afb5b5ba3fda9f22559743f05a9e8fa344c32bc4f6cddc83b32846a3ba13702c26156990136a3c2f0a72f653327f350bbb6abb79b80279b1", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x98, 0x20024084}}], 0x1, 0x20040000)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x8, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0xfd00, 0xd7ff, 0x400}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "285cbe607ecdfb"})

[ 1539.143951][T32086] loop3: detected capacity change from 0 to 264192
[ 1539.146410][T32088] loop1: detected capacity change from 0 to 264192
[ 1539.163588][T32088] EXT4-fs (loop1): Invalid log cluster size: 452984832
[ 1539.164362][T32084] loop2: detected capacity change from 0 to 264192
[ 1539.171643][T32086] EXT4-fs (loop3): inodes count not valid: 17367072 vs 32
[ 1539.177972][T32087] loop4: detected capacity change from 0 to 140
04:27:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xc00}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:33 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0200ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000011c002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1539.203868][T32087] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1539.204394][T32084] EXT4-fs (loop2): Invalid log cluster size: 4294967040
04:27:33 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000003f82000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001d01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1539.274663][T32104] loop4: detected capacity change from 0 to 140
[ 1539.280756][T32105] loop1: detected capacity change from 0 to 264192
[ 1539.305143][T32108] loop2: detected capacity change from 0 to 264192
[ 1539.311989][T32110] loop3: detected capacity change from 0 to 264192
04:27:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xf00}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1539.320517][T32105] EXT4-fs (loop1): Invalid log cluster size: 469827584
[ 1539.331941][T32108] EXT4-fs (loop2): Invalid log cluster size: 50331648
[ 1539.339390][T32104] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1539.351624][T32110] EXT4-fs (loop3): inodes count not valid: 18677792 vs 32
04:27:33 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0300ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000020002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:33 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001e01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffdf92000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x1100}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1539.443391][T32119] loop2: detected capacity change from 0 to 264192
[ 1539.448465][ T1437] blk_print_req_error: 15 callbacks suppressed
[ 1539.448477][ T1437] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1539.452848][T32118] loop4: detected capacity change from 0 to 140
[ 1539.456048][ T1437] buffer_io_error: 12 callbacks suppressed
[ 1539.456058][ T1437] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1539.466005][T32121] loop3: detected capacity change from 0 to 264192
[ 1539.482750][T32123] loop1: detected capacity change from 0 to 264192
[ 1539.498301][T32121] EXT4-fs (loop3): inodes count not valid: 18743328 vs 32
[ 1539.511245][T32118] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1539.520931][T32123] EXT4-fs (loop1): Invalid log cluster size: 536870912
[ 1539.526974][T32119] EXT4-fs (loop2): Invalid log cluster size: 4261412608
[ 1539.537664][T23865] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1539.577233][T24855] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1539.586601][T24855] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1539.594602][T24855] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1539.603772][T24855] Buffer I/O error on dev loop4, logical block 2, async page read
[ 1539.629319][T24855] I/O error, dev loop4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1539.638496][T24855] Buffer I/O error on dev loop4, logical block 3, async page read
04:27:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x700}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:34 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffffb2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002101090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x4788}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:34 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0400ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000320002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1539.744120][T32129] loop2: detected capacity change from 0 to 264192
[ 1539.756004][T32133] loop3: detected capacity change from 0 to 264192
[ 1539.770620][T32135] loop4: detected capacity change from 0 to 140
[ 1539.778057][T32137] loop1: detected capacity change from 0 to 264192
[ 1539.786161][T32129] EXT4-fs (loop2): Invalid log cluster size: 4294967040
04:27:34 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000f7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf838b9f1"], 0x20000600}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {0x7e1}}, './file0\x00'})
sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x5, 0x4, 0x7, {0x0, 0xea60}, {0x77359400}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "98fd10ec6a661fd105fe127b0e149f0f752c80f3e6aaa2df2aee86691335ce4589de04c85b988f7eae266574c4ec4e7e0a089d0aa80a53ead56c74a720046f2f"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040840}, 0x4884)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000000c0)=0x7, 0x4)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x6, 0x5, 0x0, 0x0, 0x6, 0x80340, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1200, 0x1, @perf_bp={&(0x7f0000000300), 0x5}, 0x4024, 0x25, 0x8, 0x3, 0x7fff, 0x5, 0x8000, 0x0, 0xfff, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syz_tun\x00', {0x900}})
r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
fallocate(r4, 0x100000001, 0xc, 0x2811fdff)
clock_gettime(0x0, &(0x7f00000001c0))
socket$phonet_pipe(0x23, 0x5, 0x2)
accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000200)=0x80)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x1d, r1}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)={0x7, 0x278, 0x4, {}, {}, {0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x7, 0x1, 0x0, 0x0, "718d2e43a173ceb8"}}, 0x48}}, 0x80)

04:27:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x4888}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1539.795726][T32134] __nla_validate_parse: 55 callbacks suppressed
[ 1539.795739][T32134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1539.812123][T32137] EXT4-fs (loop1): Invalid log cluster size: 537067520
[ 1539.819281][T32133] EXT4-fs (loop3): inodes count not valid: 18939936 vs 32
[ 1539.826472][T32135] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:34 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffdfd2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1539.855733][T32142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:34 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0500ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000001020002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x5865}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1539.964741][T32147] loop4: detected capacity change from 0 to 140
[ 1540.000822][T32149] loop1: detected capacity change from 0 to 264192
[ 1540.024853][T32152] loop2: detected capacity change from 0 to 264192
[ 1540.031736][T32147] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1540.048101][T32152] EXT4-fs (loop2): Invalid log cluster size: 4261412608
[ 1540.056587][T32149] EXT4-fs (loop1): Invalid log cluster size: 537919488
04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000022002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1540.069185][T32154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:34 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffffe2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002501090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0600ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000025002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:34 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0}) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000f7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf838b9f1"], 0x20000600}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {0x7e1}}, './file0\x00'})
sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x5, 0x4, 0x7, {0x0, 0xea60}, {0x77359400}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "98fd10ec6a661fd105fe127b0e149f0f752c80f3e6aaa2df2aee86691335ce4589de04c85b988f7eae266574c4ec4e7e0a089d0aa80a53ead56c74a720046f2f"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040840}, 0x4884) (async)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000000c0)=0x7, 0x4)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180), 0x0) (async)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x6, 0x5, 0x0, 0x0, 0x6, 0x80340, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1200, 0x1, @perf_bp={&(0x7f0000000300), 0x5}, 0x4024, 0x25, 0x8, 0x3, 0x7fff, 0x5, 0x8000, 0x0, 0xfff, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syz_tun\x00', {0x900}}) (async)
r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
fallocate(r4, 0x100000001, 0xc, 0x2811fdff)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000200)=0x80)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x1d, r1}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)={0x7, 0x278, 0x4, {}, {}, {0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x7, 0x1, 0x0, 0x0, "718d2e43a173ceb8"}}, 0x48}}, 0x80)

04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000026002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1540.222006][T32164] loop4: detected capacity change from 0 to 140
[ 1540.236232][T32167] loop3: detected capacity change from 0 to 264192
[ 1540.238257][T32159] loop2: detected capacity change from 0 to 264192
04:27:34 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0}) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000f7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf838b9f1"], 0x20000600}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {0x7e1}}, './file0\x00'})
sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x5, 0x4, 0x7, {0x0, 0xea60}, {0x77359400}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "98fd10ec6a661fd105fe127b0e149f0f752c80f3e6aaa2df2aee86691335ce4589de04c85b988f7eae266574c4ec4e7e0a089d0aa80a53ead56c74a720046f2f"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040840}, 0x4884) (async)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000000c0)=0x7, 0x4)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180), 0x0) (async)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x6, 0x5, 0x0, 0x0, 0x6, 0x80340, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1200, 0x1, @perf_bp={&(0x7f0000000300), 0x5}, 0x4024, 0x25, 0x8, 0x3, 0x7fff, 0x5, 0x8000, 0x0, 0xfff, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syz_tun\x00', {0x900}}) (rerun: 32)
r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
fallocate(r4, 0x100000001, 0xc, 0x2811fdff)
clock_gettime(0x0, &(0x7f00000001c0)) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000200)=0x80)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x1d, r1}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)={0x7, 0x278, 0x4, {}, {}, {0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x7, 0x1, 0x0, 0x0, "718d2e43a173ceb8"}}, 0x48}}, 0x80)

04:27:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x6000}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1540.265461][T32164] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1540.265813][T32167] EXT4-fs (loop3): inodes count not valid: 19202080 vs 32
[ 1540.285145][T32175] loop1: detected capacity change from 0 to 264192
[ 1540.286366][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1540.300807][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1540.300971][T32159] EXT4-fs (loop2): Invalid log cluster size: 4294967040
04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000032002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1540.319512][T32175] EXT4-fs (loop1): Invalid log cluster size: 637534208
04:27:34 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0700ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004001090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000fffffffffffffffe2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.363773][T32177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1540.408158][T32185] loop4: detected capacity change from 0 to 140
[ 1540.414581][T32187] loop3: detected capacity change from 0 to 264192
[ 1540.436759][T32188] loop2: detected capacity change from 0 to 264192
04:27:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80900)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x6, 0x3}, {0xfff2, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044041}, 0x8000081)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x3c, 0x1c, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}, [@NDA_PROBES={0x8}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7fffffff}, @NDA_MASTER={0x8, 0x9, 0x60}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)

04:27:34 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0800ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.490831][T32185] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1540.501826][T32188] EXT4-fs (loop2): Invalid log block size: 4294967040
[ 1540.514700][T32190] loop1: detected capacity change from 0 to 264192
[ 1540.522303][T32190] EXT4-fs (loop1): Invalid log cluster size: 838860800
04:27:34 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0a00ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x6558}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:34 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000134002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:34 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f00000001000000000000000000000fff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.541365][T32187] EXT4-fs (loop3): inodes count not valid: 20971552 vs 32
04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000003e002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80900)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x6, 0x3}, {0xfff2, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044041}, 0x8000081)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x3c, 0x1c, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}, [@NDA_PROBES={0x8}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7fffffff}, @NDA_MASTER={0x8, 0x9, 0x60}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
socket$netlink(0x10, 0x3, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80900) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x6, 0x3}, {0xfff2, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044041}, 0x8000081) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x3c, 0x1c, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}, [@NDA_PROBES={0x8}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7fffffff}, @NDA_MASTER={0x8, 0x9, 0x60}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async)

04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20005a01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.594093][T32202] loop1: detected capacity change from 0 to 264192
[ 1540.594579][T32200] loop4: detected capacity change from 0 to 140
[ 1540.610277][T32199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1540.626008][T32202] EXT4-fs (loop1): Invalid log cluster size: 872480768
04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000003f002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:35 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0f00ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.665195][T32206] loop2: detected capacity change from 0 to 264192
[ 1540.667100][T32200] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1540.678989][T32212] loop3: detected capacity change from 0 to 264192
[ 1540.690828][T32212] EXT4-fs (loop3): inodes count not valid: 22675488 vs 32
[ 1540.703305][T32206] EXT4-fs (loop2): Invalid log cluster size: 251658240
04:27:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x8100}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80900) (rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x6, 0x3}, {0xfff2, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044041}, 0x8000081) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x3c, 0x1c, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}, [@NDA_PROBES={0x8}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7fffffff}, @NDA_MASTER={0x8, 0x9, 0x60}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)

[ 1540.717022][T32216] loop1: detected capacity change from 0 to 264192
[ 1540.720117][T32223] loop4: detected capacity change from 0 to 140
[ 1540.723791][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1540.738948][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1540.753085][T32225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20008201090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.770468][T32223] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1540.791306][T32216] EXT4-fs (loop1): Invalid log cluster size: 1056964608
[ 1540.791913][T32232] loop3: detected capacity change from 0 to 264192
04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000fffffbff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 0:
pipe(&(0x7f0000000e80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x1ff, 0x7, [0x8000, 0xfffb, 0x6, 0x5, 0x8, 0xff81, 0x9]}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000300)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @initr0]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, @rc={0x1f, @any, 0x6}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}}}, 0x270, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x400, 0x0, 0x16})

04:27:35 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f1000ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.823306][T32232] EXT4-fs (loop3): inodes count not valid: 25296928 vs 32
[ 1540.853677][T32237] loop2: detected capacity change from 0 to 264192
04:27:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x8847}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:35 executing program 0:
pipe(&(0x7f0000000e80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x1ff, 0x7, [0x8000, 0xfffb, 0x6, 0x5, 0x8, 0xff81, 0x9]}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000300)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @initr0]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, @rc={0x1f, @any, 0x6}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}}}, 0x270, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x400, 0x0, 0x16})
pipe(&(0x7f0000000e80)) (async)
splice(r0, 0x0, r1, 0x0, 0x2, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
socket$inet(0x2, 0x80001, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x10) (async)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x1ff, 0x7, [0x8000, 0xfffb, 0x6, 0x5, 0x8, 0xff81, 0x9]}, 0x16) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000300)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @initr0]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, @rc={0x1f, @any, 0x6}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}}}, 0x270, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x400, 0x0, 0x16}) (async)

04:27:35 executing program 0:
pipe(&(0x7f0000000e80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x1ff, 0x7, [0x8000, 0xfffb, 0x6, 0x5, 0x8, 0xff81, 0x9]}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000300)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @initr0]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, @rc={0x1f, @any, 0x6}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}}}, 0x270, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x400, 0x0, 0x16})

04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000040002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @loopback, 0x1000}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})

[ 1540.871019][T32239] loop4: detected capacity change from 0 to 140
[ 1540.887951][T32237] EXT4-fs (loop2): Invalid log cluster size: 4227858176
[ 1540.888972][T32244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1540.903692][T32239] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20008401090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000000003ffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.943391][T32260] loop1: detected capacity change from 0 to 264192
[ 1540.978089][T32264] loop3: detected capacity change from 0 to 264192
[ 1540.981138][T32266] loop2: detected capacity change from 0 to 264192
04:27:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164b9b3f427f6ba6b34f98125f30e69cfe126246d9fc24da30b273683626e00dc254d570dca6b78ad833488cfe4109eaf009edd0d69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4683145531458b7d1e342d6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760e7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6552e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76f822278d124638fec58faeb44158f6c80df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c48d644229b93f6c9084659ce777ddac563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a02f2593dfc4cb4114b9f9cf4ad155110cd3ace2b322ac31bfa27847c799c8a69a1ea5b98e525e6383ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c28200000080000000002491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde1f88d8b0b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a9a16adf9c13301a076267077d87925d12422434d4dfa920bddca99bf9bbdf36c4ca89c516647542ac45545337829da7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fc4b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add335d43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3969d0ea1d5a87f6f67d10eecd052c603810caa468adb41977173666cc456d320364d3f9947f5b12fab80ee48b8845819e799"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @loopback, 0x1000}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
set_mempolicy(0x1, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164b9b3f427f6ba6b34f98125f30e69cfe126246d9fc24da30b273683626e00dc254d570dca6b78ad833488cfe4109eaf009edd0d69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4683145531458b7d1e342d6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760e7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6552e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76f822278d124638fec58faeb44158f6c80df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c48d644229b93f6c9084659ce777ddac563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a02f2593dfc4cb4114b9f9cf4ad155110cd3ace2b322ac31bfa27847c799c8a69a1ea5b98e525e6383ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c28200000080000000002491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde1f88d8b0b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a9a16adf9c13301a076267077d87925d12422434d4dfa920bddca99bf9bbdf36c4ca89c516647542ac45545337829da7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fc4b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add335d43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3969d0ea1d5a87f6f67d10eecd052c603810caa468adb41977173666cc456d320364d3f9947f5b12fab80ee48b8845819e799"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
socket$inet6(0xa, 0x803, 0x6) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @loopback, 0x1000}, 0x1c) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async)

04:27:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0x8848}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async)
r1 = socket$kcm(0x29, 0x5, 0x0) (async)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @loopback, 0x1000}, 0x1c) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})

04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20009501090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1540.996509][T32264] EXT4-fs (loop3): inodes count not valid: 25428000 vs 32
[ 1541.004852][T32260] EXT4-fs (loop1): Invalid log cluster size: 1073741824
[ 1541.014780][T32266] EXT4-fs (loop2): Invalid log cluster size: 4278386688
04:27:35 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f1400ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000001fffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000342002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.046697][T32276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1541.083672][T32280] loop3: detected capacity change from 0 to 264192
04:27:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000002000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[ 1541.098174][T32289] loop4: detected capacity change from 0 to 140
[ 1541.099722][T32290] loop2: detected capacity change from 0 to 264192
[ 1541.104729][T23865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1541.120110][T23865] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1541.129704][T32282] loop1: detected capacity change from 0 to 264192
[ 1541.139290][T32293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20009601090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000000007fffffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1541.149577][T32280] EXT4-fs (loop3): inodes count not valid: 26542112 vs 32
[ 1541.159732][T32289] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1541.169976][T32282] EXT4-fs (loop1): Invalid log cluster size: 1107492864
[ 1541.180466][T32290] EXT4-fs (loop2): Invalid log cluster size: 4280221696
04:27:35 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f2600ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000ffffffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc, 0xc105}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1541.217186][T32298] loop3: detected capacity change from 0 to 264192
[ 1541.223309][T24855] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1541.232934][T24855] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1541.246577][T32294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000046002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.271488][T32303] loop4: detected capacity change from 0 to 140
[ 1541.274220][T22835] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1541.280925][T32305] loop2: detected capacity change from 0 to 264192
[ 1541.287006][T22835] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1541.309232][T32305] EXT4-fs (loop2): Invalid log cluster size: 4294967040
04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20009e01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f4600ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000002000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0], 0x20}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000002000900010063616b65"], 0x34}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f00000001000000000007ffffffffffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1541.320071][T32307] loop1: detected capacity change from 0 to 264192
[ 1541.333542][T32298] EXT4-fs (loop3): inodes count not valid: 26607648 vs 32
[ 1541.341399][T32303] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1541.353408][T32307] EXT4-fs (loop1): Invalid log cluster size: 1174405120
04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000048002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.405129][T32311] loop2: detected capacity change from 0 to 264192
[ 1541.428693][T32315] loop1: detected capacity change from 0 to 264192
[ 1541.432697][T32316] loop4: detected capacity change from 0 to 140
[ 1541.441649][T32318] loop3: detected capacity change from 0 to 264192
[ 1541.448422][T32311] EXT4-fs (loop2): Invalid log block size: 4278648832
04:27:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0x4}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000002000900010063616b65"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) (async)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0], 0x20}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000002000900010063616b65"], 0x34}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000248002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.459380][T32315] EXT4-fs (loop1): Invalid log cluster size: 1207959552
[ 1541.473814][T32316] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1541.486481][T32318] EXT4-fs (loop3): inodes count not valid: 27131936 vs 32
04:27:35 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000a101090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f6400ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:35 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f00000001000000007fffffffffffffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1541.530932][T32336] loop1: detected capacity change from 0 to 264192
[ 1541.557879][T32342] loop3: detected capacity change from 0 to 264192
[ 1541.563641][T22835] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1541.565378][T32341] loop4: detected capacity change from 0 to 140
04:27:35 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000349002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.572620][T24855]  loop4: unable to read partition table
[ 1541.582250][T32345] loop2: detected capacity change from 0 to 264192
[ 1541.604543][T32336] EXT4-fs (loop1): Invalid log cluster size: 1208090624
[ 1541.638893][T32341] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1541.639232][T32342] EXT4-fs (loop3): inodes count not valid: 27328544 vs 32
[ 1541.661357][T32345] EXT4-fs (loop2): Invalid log block size: 4294934272
[ 1541.663087][T32348] loop1: detected capacity change from 0 to 264192
04:27:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0x5}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000a501090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000feffffffffffffff2000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1541.691330][T32348] EXT4-fs (loop1): Invalid log cluster size: 1224933376
[ 1541.718729][T32365] loop3: detected capacity change from 0 to 264192
04:27:36 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655ffe00ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000004c002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.753135][T32365] EXT4-fs (loop3): inodes count not valid: 27590688 vs 32
[ 1541.782457][T32369] loop2: detected capacity change from 0 to 264192
[ 1541.787870][T32372] loop4: detected capacity change from 0 to 140
04:27:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0x18}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000b501090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1541.813941][T32372] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1541.827790][T32374] loop1: detected capacity change from 0 to 264192
[ 1541.841071][T32369] EXT4-fs (loop2): Invalid log block size: 4294966784
[ 1541.854919][T32374] EXT4-fs (loop1): Invalid log cluster size: 1275068416
04:27:36 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000002040000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0003ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1541.855290][T32378] loop3: detected capacity change from 0 to 264192
[ 1541.898009][T32378] EXT4-fs (loop3): inodes count not valid: 28639264 vs 32
[ 1541.926106][T32383] loop4: detected capacity change from 0 to 140
[ 1541.940882][T32382] loop2: detected capacity change from 0 to 264192
04:27:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000da01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000024d002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1541.954884][T32383] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1541.977372][T32382] EXT4-fs (loop2): Invalid log cluster size: 33554432
[ 1541.990295][T32387] loop3: detected capacity change from 0 to 264192
[ 1542.001454][T32387] EXT4-fs (loop3): inodes count not valid: 31064096 vs 32
04:27:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0x28}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:36 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000200000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655fe606ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.032300][T32389] loop1: detected capacity change from 0 to 264192
[ 1542.055423][T32389] EXT4-fs (loop1): Invalid log cluster size: 1291976704
04:27:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000ee01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.080194][T32393] loop4: detected capacity change from 0 to 140
[ 1542.083551][T32395] loop2: detected capacity change from 0 to 264192
[ 1542.121167][T32398] loop3: detected capacity change from 0 to 264192
04:27:36 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000051002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0x2}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1542.123898][T24855]  loop3: unable to read partition table
[ 1542.142135][T32400] loop1: detected capacity change from 0 to 264192
[ 1542.157040][T32393] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1542.158545][T32395] EXT4-fs (loop2): inodes count not valid: 32 vs 288
[ 1542.174200][T32398] EXT4-fs (loop3): inodes count not valid: 32374816 vs 32
04:27:36 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655ffa0fffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.198421][T32400] EXT4-fs (loop1): Invalid log cluster size: 1358954496
[ 1542.228514][T32404] loop4: detected capacity change from 0 to 140
04:27:36 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000000100000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fd01090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000055002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1542.245607][T32404] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1542.286624][T32408] loop3: detected capacity change from 0 to 264192
[ 1542.291884][ T1437]  loop3: unable to read partition table
04:27:36 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0044ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.295761][T32411] loop2: detected capacity change from 0 to 264192
[ 1542.303916][T32412] loop1: detected capacity change from 0 to 264192
[ 1542.313128][T32411] EXT4-fs (loop2): inodes count not valid: 32 vs 64
[ 1542.343681][T32415] loop4: detected capacity change from 0 to 140
[ 1542.352267][T32408] EXT4-fs (loop3): inodes count not valid: 33357856 vs 32
[ 1542.363986][T32412] EXT4-fs (loop1): Invalid log cluster size: 1426063360
04:27:36 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000000200000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0x7}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1542.399525][T32415] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1542.428788][T32418] loop2: detected capacity change from 0 to 264192
04:27:36 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000255002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:36 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0046ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000402090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.484860][T32418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1542.495693][T32424] loop1: detected capacity change from 0 to 264192
[ 1542.513817][T32426] loop4: detected capacity change from 0 to 140
[ 1542.533307][T32429] loop3: detected capacity change from 0 to 264192
04:27:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0x8}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1542.570458][T32424] EXT4-fs (loop1): Invalid log cluster size: 1426194432
[ 1542.577557][T32426] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1542.593523][T32418] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6946/file0 supports timestamps until 2038 (0x7fffffff)
[ 1542.610920][T32429] EXT4-fs (loop3): inodes count not valid: 33816608 vs 32
04:27:37 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffffaa55002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0xf}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:37 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f1065ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004102090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.671969][ T1825] EXT4-fs (loop2): unmounting filesystem.
[ 1542.709026][T32439] loop3: detected capacity change from 0 to 264192
[ 1542.732892][T32440] loop1: detected capacity change from 0 to 264192
[ 1542.735309][T32434] loop4: detected capacity change from 0 to 140
[ 1542.746253][T32439] EXT4-fs (loop3): inodes count not valid: 37814304 vs 32
04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004502090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.777835][T32440] EXT4-fs (loop1): Invalid log cluster size: 1437270015
[ 1542.795700][T32434] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1542.808924][T32443] loop3: detected capacity change from 0 to 264192
[ 1542.809776][T23865]  loop3: unable to read partition table
04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000060002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0x300}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:37 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655ffeffffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004a02090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1542.849401][T32447] loop2: detected capacity change from 0 to 264192
[ 1542.865153][T32443] EXT4-fs (loop3): inodes count not valid: 38076448 vs 32
[ 1542.880286][T32449] loop1: detected capacity change from 0 to 264192
[ 1542.912056][T32453] loop4: detected capacity change from 0 to 140
[ 1542.921486][T32455] loop3: detected capacity change from 0 to 264192
[ 1542.927652][T23865]  loop3: unable to read partition table
[ 1542.932254][T32449] EXT4-fs (loop1): Invalid log cluster size: 1610612736
[ 1542.941328][T32447] [EXT4 FS bs=1024, gc=1, bpg=768, ipg=32, mo=a002e018, mo2=0000]
[ 1542.959719][T32455] EXT4-fs (loop3): inodes count not valid: 38404128 vs 32
[ 1542.979389][T32447] System zones: 1-2, 19-19, 35-38, 46-46
[ 1542.986011][T32453] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1542.986341][T32447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
04:27:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xab, r6, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0x5, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_FRAME_MATCH={0x173, 0x5b, "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"}]}, 0x19c}}, 0x4)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
set_mempolicy(0x1, &(0x7f00000000c0)=0x9, 0x8)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x4}, [], {0x4, 0x6}}, 0x24, 0x0)

04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000068002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1543.028287][T32447] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6947/file0 supports timestamps until 2038 (0x7fffffff)
04:27:37 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000000800000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006102090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x4, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xab, r6, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0x5, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_FRAME_MATCH={0x173, 0x5b, "38bc036e91e7613e5e3eba1c90988dea67872844a33c6dfdbf4c17a8ce0a4c34be4dd7cb4a29847ba2b9fd4c97a7cb231015d240cd24b70b9c69c78cfd10bc4d982c18cb9201d77b456f7d1c9067f790b1debc61aa53d0b3d373f5e976e90e9423f6c307520825cd5f46e92347e00880494648bb92698a6f322da418bbc765653bca10eb10596a15e8e43b8950e88d21e8e5442ef36f43c78a133aa9d821357e441d4d0cf94b6e47b1db9fdab5a52530323440fa38a4e3d37a03fbc4572eac88f402f287175b0cc15c895d96a541709024a77bf74ee93e7c9eccaa2a71abbd8c795b55961b2e4b85c53a6e47eced34ef4db5abf9960000000000000005fcffd7449c3f572de1390fe825e6f9194f346cff6a3a3007fd91ea774b0413470d8306534b6163b44da24d7025129fef62b773cb0081859480e2bbbe46e2e87d30caaf9016e2b77353827cba3b9688022cd6fe79b3b7936f89b08be67f1b41bb6c9aa0e30768ad58d74762be1752789232f6"}]}, 0x19c}}, 0x4)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
set_mempolicy(0x1, &(0x7f00000000c0)=0x9, 0x8)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x4}, [], {0x4, 0x6}}, 0x24, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xab, r6, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0x5, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_FRAME_MATCH={0x173, 0x5b, "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"}]}, 0x19c}}, 0x4) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async)
set_mempolicy(0x1, &(0x7f00000000c0)=0x9, 0x8) (async)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x4}, [], {0x4, 0x6}}, 0x24, 0x0) (async)

[ 1543.081036][T32463] loop1: detected capacity change from 0 to 264192
[ 1543.110891][T32463] EXT4-fs (loop1): Invalid log cluster size: 1744830464
04:27:37 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0102ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.128856][ T1825] EXT4-fs (loop2): unmounting filesystem.
[ 1543.132317][T32469] loop3: detected capacity change from 0 to 264192
[ 1543.160243][T32469] EXT4-fs (loop3): inodes count not valid: 39911456 vs 32
[ 1543.173609][T32471] loop4: detected capacity change from 0 to 140
04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000006c002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006502090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.175402][T23865]  loop4: unable to read partition table
[ 1543.189187][T32473] loop2: detected capacity change from 0 to 264192
[ 1543.202367][T32471] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1543.228722][T32478] loop3: detected capacity change from 0 to 264192
[ 1543.238047][T32479] loop1: detected capacity change from 0 to 264192
[ 1543.250604][T32479] EXT4-fs (loop1): Invalid log cluster size: 1811939328
[ 1543.273878][T32473] [EXT4 FS bs=1024, gc=1, bpg=2048, ipg=32, mo=a002e018, mo2=0000]
04:27:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x5, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:37 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0103ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.285768][T32473] System zones: 1-2, 19-19, 35-38, 46-46
[ 1543.300057][T32473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000074002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xab, r6, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0x5, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_FRAME_MATCH={0x173, 0x5b, "38bc036e91e7613e5e3eba1c90988dea67872844a33c6dfdbf4c17a8ce0a4c34be4dd7cb4a29847ba2b9fd4c97a7cb231015d240cd24b70b9c69c78cfd10bc4d982c18cb9201d77b456f7d1c9067f790b1debc61aa53d0b3d373f5e976e90e9423f6c307520825cd5f46e92347e00880494648bb92698a6f322da418bbc765653bca10eb10596a15e8e43b8950e88d21e8e5442ef36f43c78a133aa9d821357e441d4d0cf94b6e47b1db9fdab5a52530323440fa38a4e3d37a03fbc4572eac88f402f287175b0cc15c895d96a541709024a77bf74ee93e7c9eccaa2a71abbd8c795b55961b2e4b85c53a6e47eced34ef4db5abf9960000000000000005fcffd7449c3f572de1390fe825e6f9194f346cff6a3a3007fd91ea774b0413470d8306534b6163b44da24d7025129fef62b773cb0081859480e2bbbe46e2e87d30caaf9016e2b77353827cba3b9688022cd6fe79b3b7936f89b08be67f1b41bb6c9aa0e30768ad58d74762be1752789232f6"}]}, 0x19c}}, 0x4)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
set_mempolicy(0x1, &(0x7f00000000c0)=0x9, 0x8)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x4}, [], {0x4, 0x6}}, 0x24, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xab, r6, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0x5, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_FRAME_MATCH={0x173, 0x5b, "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"}]}, 0x19c}}, 0x4) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async)
set_mempolicy(0x1, &(0x7f00000000c0)=0x9, 0x8) (async)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x4}, [], {0x4, 0x6}}, 0x24, 0x0) (async)

04:27:37 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000000a00000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.330165][T32478] EXT4-fs (loop3): inodes count not valid: 40173600 vs 32
[ 1543.333458][T32473] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6948/file0 supports timestamps until 2038 (0x7fffffff)
[ 1543.354927][T32501] loop4: detected capacity change from 0 to 140
[ 1543.358506][T32503] loop1: detected capacity change from 0 to 264192
[ 1543.362560][ T1437]  loop1: unable to read partition table
04:27:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x18, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006902090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.397218][T32501] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1543.397439][ T1825] EXT4-fs (loop2): unmounting filesystem.
[ 1543.414921][T32503] EXT4-fs (loop1): Invalid log cluster size: 1946157056
04:27:37 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0104ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000007a002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x28, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1543.444630][T32510] loop3: detected capacity change from 0 to 264192
[ 1543.452311][T32510] EXT4-fs (loop3): inodes count not valid: 40435744 vs 32
[ 1543.493204][T32514] loop1: detected capacity change from 0 to 264192
[ 1543.494832][T23865]  loop1: unable to read partition table
[ 1543.507662][T32516] loop2: detected capacity change from 0 to 264192
[ 1543.521023][T32514] EXT4-fs (loop1): Invalid log cluster size: 2046820352
[ 1543.522647][T32520] loop4: detected capacity change from 0 to 140
04:27:37 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006a02090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:37 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x408202, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f", 0x68, 0x0, 0x0, 0x0)
r3 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f00000004c0)="24f1d5342107c074da50a1777db81c5303d020be216562a5640325019495efccb44d5102bedbeccfd97ad8676264babd4cfb01bd1fe1480db1b671889917d11cb89103807c02fb58c86080028e82505a7bc46b5b5d97692d231b4109613e33bd1808")
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125)
sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0)
fcntl$setstatus(r4, 0x4, 0x46802)
io_setup(0x0, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000400)="704fae7b6f702a8c8f1f1fd9bb5222175f2c42ad732b9a6123dffd769ea6e2b99526e93237026d8ef2c0a90b471cddf1ea5304fdf43c230a17010000000000000092c45640e4a946c5ac747ff98e7c96f2113016a9a4463eb0d945ecd7688371fcb184e1597ee765e2fb", 0x6a, 0x0, 0x0, 0x6}])

04:27:37 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000007c002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1543.544597][T32520] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1543.559645][T32516] [EXT4 FS bs=1024, gc=1, bpg=2560, ipg=32, mo=a002e018, mo2=0000]
[ 1543.568492][T32516] System zones: 1-2, 19-19, 35-38, 46-46
[ 1543.574654][T32516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
04:27:37 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0105ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0xf, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1543.595133][T32537] loop1: detected capacity change from 0 to 264192
[ 1543.595317][T23865]  loop1: unable to read partition table
[ 1543.612627][T32539] loop3: detected capacity change from 0 to 264192
[ 1543.620718][T32516] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6949/file0 supports timestamps until 2038 (0x7fffffff)
[ 1543.635990][T32537] EXT4-fs (loop1): Invalid log cluster size: 2080374784
04:27:38 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000286002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:38 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000001100000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x3, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1543.681647][T32544] loop4: detected capacity change from 0 to 140
[ 1543.696963][T32539] EXT4-fs (loop3): inodes count not valid: 40501280 vs 32
[ 1543.707777][ T1825] EXT4-fs (loop2): unmounting filesystem.
[ 1543.720542][T32544] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000a502090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.720934][T32547] loop1: detected capacity change from 0 to 264192
04:27:38 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0106ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1543.783953][T32551] loop2: detected capacity change from 0 to 264192
[ 1543.791539][T32553] loop3: detected capacity change from 0 to 264192
[ 1543.801218][T32547] EXT4-fs (loop1): Invalid log cluster size: 2248278016
[ 1543.820557][T32553] EXT4-fs (loop3): inodes count not valid: 44367904 vs 32
04:27:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x4, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000c502090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffffff8c002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1543.840588][T32551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1543.859124][T32560] loop4: detected capacity change from 0 to 140
[ 1543.878767][T32562] loop3: detected capacity change from 0 to 264192
[ 1543.883354][ T1437]  loop3: unable to read partition table
[ 1543.896840][T32564] loop1: detected capacity change from 0 to 264192
[ 1543.906233][T32562] EXT4-fs (loop3): inodes count not valid: 46465056 vs 32
[ 1543.908954][T32551] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6950/file0 supports timestamps until 2038 (0x7fffffff)
[ 1543.936946][T32560] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1543.965481][T32559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1543.977756][ T1825] EXT4-fs (loop2): unmounting filesystem.
[ 1544.021631][T32564] EXT4-fs (loop1): Invalid log cluster size: 2365587455
04:27:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x408202, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f", 0x68, 0x0, 0x0, 0x0)
r3 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f00000004c0)="24f1d5342107c074da50a1777db81c5303d020be216562a5640325019495efccb44d5102bedbeccfd97ad8676264babd4cfb01bd1fe1480db1b671889917d11cb89103807c02fb58c86080028e82505a7bc46b5b5d97692d231b4109613e33bd1808")
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125)
sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0)
fcntl$setstatus(r4, 0x4, 0x46802)
io_setup(0x0, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000400)="704fae7b6f702a8c8f1f1fd9bb5222175f2c42ad732b9a6123dffd769ea6e2b99526e93237026d8ef2c0a90b471cddf1ea5304fdf43c230a17010000000000000092c45640e4a946c5ac747ff98e7c96f2113016a9a4463eb0d945ecd7688371fcb184e1597ee765e2fb", 0x6a, 0x0, 0x0, 0x6}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) (async)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x408202, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f", 0x68, 0x0, 0x0, 0x0) (async)
syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f00000004c0)="24f1d5342107c074da50a1777db81c5303d020be216562a5640325019495efccb44d5102bedbeccfd97ad8676264babd4cfb01bd1fe1480db1b671889917d11cb89103807c02fb58c86080028e82505a7bc46b5b5d97692d231b4109613e33bd1808") (async)
creat(&(0x7f0000000080)='./file0\x00', 0x125) (async)
sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) (async)
fcntl$setstatus(r4, 0x4, 0x46802) (async)
io_setup(0x0, &(0x7f0000000180)) (async)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000400)="704fae7b6f702a8c8f1f1fd9bb5222175f2c42ad732b9a6123dffd769ea6e2b99526e93237026d8ef2c0a90b471cddf1ea5304fdf43c230a17010000000000000092c45640e4a946c5ac747ff98e7c96f2113016a9a4463eb0d945ecd7688371fcb184e1597ee765e2fb", 0x6a, 0x0, 0x0, 0x6}]) (async)

04:27:38 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000001200000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0107ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000d502090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0xe9c, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:38 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000001aa002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1544.446046][T32573] loop4: detected capacity change from 0 to 140
[ 1544.448448][T32575] loop3: detected capacity change from 0 to 264192
[ 1544.461340][T32577] loop2: detected capacity change from 0 to 264192
[ 1544.468442][T32570] loop1: detected capacity change from 0 to 264192
[ 1544.475080][T32573] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1544.486326][T32570] EXT4-fs (loop1): Invalid log cluster size: 2852192256
04:27:38 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000001300000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x2, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:38 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e102090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:38 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000003ac002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1544.495368][T32575] EXT4-fs (loop3): inodes count not valid: 47513632 vs 32
[ 1544.503946][T32577] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1544.514166][T32577] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6951/file0 supports timestamps until 2038 (0x7fffffff)
[ 1544.536264][ T1825] EXT4-fs (loop2): unmounting filesystem.
04:27:38 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0108ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1544.598287][T32588] loop3: detected capacity change from 0 to 264192
[ 1544.600017][T32589] loop1: detected capacity change from 0 to 264192
[ 1544.613392][T32592] loop2: detected capacity change from 0 to 264192
[ 1544.618529][T32593] loop4: detected capacity change from 0 to 140
[ 1544.632108][T32588] EXT4-fs (loop3): inodes count not valid: 48300064 vs 32
04:27:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e502090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1544.640173][T32593] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1544.663153][T32589] EXT4-fs (loop1): Invalid log cluster size: 2885877760
[ 1544.676091][T32584] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 1544.684944][T32592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1544.736285][T32599] loop3: detected capacity change from 0 to 264192
[ 1544.743804][T32599] EXT4-fs (loop3): inodes count not valid: 48562208 vs 32
[ 1544.784596][T32592] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6952/file0 supports timestamps until 2038 (0x7fffffff)
[ 1544.868129][ T1825] EXT4-fs (loop2): unmounting filesystem.
04:27:39 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) (async)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x408202, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694479668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f", 0x68, 0x0, 0x0, 0x0) (async)
r3 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f00000004c0)="24f1d5342107c074da50a1777db81c5303d020be216562a5640325019495efccb44d5102bedbeccfd97ad8676264babd4cfb01bd1fe1480db1b671889917d11cb89103807c02fb58c86080028e82505a7bc46b5b5d97692d231b4109613e33bd1808") (async)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125)
sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0)
fcntl$setstatus(r4, 0x4, 0x46802) (async)
io_setup(0x0, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000400)="704fae7b6f702a8c8f1f1fd9bb5222175f2c42ad732b9a6123dffd769ea6e2b99526e93237026d8ef2c0a90b471cddf1ea5304fdf43c230a17010000000000000092c45640e4a946c5ac747ff98e7c96f2113016a9a4463eb0d945ecd7688371fcb184e1597ee765e2fb", 0x6a, 0x0, 0x0, 0x6}])

04:27:39 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0109ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:39 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000001b2002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x7, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f802090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:39 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000000000000001800000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1544.939592][T32603] loop2: detected capacity change from 0 to 264192
[ 1544.944491][T32607] loop1: detected capacity change from 0 to 264192
[ 1544.949810][T32609] loop3: detected capacity change from 0 to 264192
[ 1544.954369][T32610] loop4: detected capacity change from 0 to 140
[ 1544.966706][T32608] __nla_validate_parse: 31 callbacks suppressed
[ 1544.966718][T32608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1544.976170][T32609] EXT4-fs (loop3): inodes count not valid: 49807392 vs 32
[ 1544.995231][T32610] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1545.005084][T32603] [EXT4 FS bs=1024, gc=1, bpg=6144, ipg=32, mo=a002e01c, mo2=0000]
[ 1545.015921][T32607] EXT4-fs (loop1): Invalid log cluster size: 2986409984
[ 1545.016914][T32603] System zones: 1-2, 19-19, 35-38, 46-46
04:27:39 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f010affff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000003090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x8, 0x34000}]}}]}, 0x3c}}, 0x0)

[ 1545.040665][T32603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1545.059154][T32603] ext4 filesystem being mounted at /root/syzkaller-testdir4092667625/syzkaller.fFJAdM/6953/file0 supports timestamps until 2038 (0x7fffffff)
[ 1545.084705][T32608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:39 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000002b2002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:39 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000020000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.114899][T32620] loop4: detected capacity change from 0 to 140
[ 1545.136554][T32622] loop3: detected capacity change from 0 to 264192
[ 1545.163590][T32625] loop1: detected capacity change from 0 to 264192
[ 1545.164567][T32626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1545.180686][ T1825] EXT4-fs (loop2): unmounting filesystem.
[ 1545.189293][T32625] EXT4-fs (loop1): Invalid log cluster size: 2986475520
[ 1545.207642][T32622] EXT4-fs (loop3): inodes count not valid: 50331680 vs 32
04:27:39 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f010bffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.215286][T32620] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1545.252544][T32629] loop2: detected capacity change from 0 to 264192
[ 1545.295345][T32632] loop4: detected capacity change from 0 to 140
[ 1545.302832][T32629] EXT4-fs (loop2): Invalid log block size: 131072
[ 1545.320012][T32632] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x2, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:39 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000001b7002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:39 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001e03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0xf, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:39 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000030000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:39 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f010cffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.523204][T32637] loop4: detected capacity change from 0 to 140
[ 1545.524869][T32639] loop3: detected capacity change from 0 to 264192
[ 1545.533419][T32641] loop2: detected capacity change from 0 to 264192
[ 1545.538121][T32642] loop1: detected capacity change from 0 to 264192
[ 1545.554268][T32640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1545.563695][T32639] EXT4-fs (loop3): inodes count not valid: 52297760 vs 32
04:27:40 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f010dffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.571081][T32637] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1545.580684][T32642] EXT4-fs (loop1): Invalid log cluster size: 3070296064
[ 1545.588431][T32641] EXT4-fs (loop2): Invalid log block size: 196608
[ 1545.602015][T32644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
04:27:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002003090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000040000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x300, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000000edc0002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1545.655950][T32648] loop4: detected capacity change from 0 to 140
[ 1545.667669][T32648] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1545.688262][T32651] loop3: detected capacity change from 0 to 264192
[ 1545.705411][T32654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1545.705948][T32655] loop1: detected capacity change from 0 to 264192
[ 1545.732455][T32657] loop2: detected capacity change from 0 to 264192
[ 1545.733821][T22835] blk_print_req_error: 22 callbacks suppressed
[ 1545.733832][T22835] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
04:27:40 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f010effff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.753107][T32655] EXT4-fs (loop1): Invalid log cluster size: 3236757504
[ 1545.754221][T22835] buffer_io_error: 20 callbacks suppressed
[ 1545.754232][T22835] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1545.784535][T32651] EXT4-fs (loop3): inodes count not valid: 52428832 vs 32
[ 1545.786934][T32644] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[ 1545.792228][T32657] EXT4-fs (loop2): Invalid log block size: 262144
04:27:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x4, 0x1, 0x34000}]}}]}, 0x3c}}, 0x0)

04:27:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffffffc9002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x31400}]}}]}, 0x3c}}, 0x0)

[ 1545.834162][T32661] loop4: detected capacity change from 0 to 140
[ 1545.859196][T32663] loop3: detected capacity change from 0 to 264192
[ 1545.860218][T23865] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1545.874884][T23865] Buffer I/O error on dev loop3, logical block 0, async page read
04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000050000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000060000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.880781][T32666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1545.898619][T32661] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1545.915002][T32663] EXT4-fs (loop3): inodes count not valid: 52494368 vs 32
[ 1545.923445][T32673] loop2: detected capacity change from 0 to 264192
[ 1545.924391][T32669] loop1: detected capacity change from 0 to 264192
04:27:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002203090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1545.966173][T32673] EXT4-fs (loop2): Invalid log block size: 393216
[ 1545.987172][T32669] EXT4-fs (loop1): Invalid log cluster size: 3388997631
[ 1545.996040][T32668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1545.996062][T32676] loop3: detected capacity change from 0 to 264192
04:27:40 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f010fffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000070000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.022261][T32676] EXT4-fs (loop3): inodes count not valid: 52559904 vs 32
[ 1546.054527][T32680] loop4: detected capacity change from 0 to 140
[ 1546.058894][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000000ca002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000080000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.069922][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1546.078752][T32683] loop2: detected capacity change from 0 to 264192
[ 1546.080734][T32685] loop1: detected capacity change from 0 to 264192
[ 1546.092457][T32685] EXT4-fs (loop1): Invalid log cluster size: 3388997632
[ 1546.100404][T32683] EXT4-fs (loop2): Invalid log block size: 458752
04:27:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="00232d8344e6dc", 0x7}], 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
syz_clone(0xba110600, 0x0, 0x0, 0x0, 0x0, 0x0)

04:27:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34002}]}}]}, 0x3c}}, 0x0)

[ 1546.116607][T32680] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000002ece002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1546.148094][T24855] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1546.155057][T32687] loop2: detected capacity change from 0 to 264192
[ 1546.185989][T32693] loop3: detected capacity change from 0 to 264192
04:27:40 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="00232d8344e6dc", 0x7}], 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
syz_clone(0xba110600, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) (async)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="00232d8344e6dc", 0x7}], 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async)
syz_clone(0xba110600, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

[ 1546.193634][T32694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1546.203777][T32695] loop1: detected capacity change from 0 to 264192
[ 1546.206610][T24855] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1546.215705][T32693] EXT4-fs (loop3): inodes count not valid: 54591520 vs 32
[ 1546.231169][T32687] EXT4-fs (loop2): Invalid log block size: 524288
04:27:40 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0110ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="00232d8344e6dc", 0x7}], 0x2)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
syz_clone(0xba110600, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40501, 0x0) (async)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="02000000020319", 0x7}, {&(0x7f0000000100)="00232d8344e6dc", 0x7}], 0x2) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async)
syz_clone(0xba110600, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

[ 1546.246504][T32695] EXT4-fs (loop1): Invalid log cluster size: 3459121152
04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000090000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000002ed0002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1546.290813][T32712] loop4: detected capacity change from 0 to 140
04:27:40 executing program 0:
pipe(&(0x7f0000000e80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000e80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x181800, 0x8)
pipe(&(0x7f0000000e80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipmr_getroute={0x1c, 0x1a, 0x700, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0xb75ba349aca94b8c, 0x1, 0x0, 0x3, 0xfe, 0x5, 0x1600}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x2400c001)
r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x820, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r7}, {0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x4004000)
pipe(&(0x7f0000000e80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r10=>r3, {0x4}}, './file0\x00'})
ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000380)={0x1, 0x101, 0x80, 0x3, 0x7, 0xbc0d})
splice(r8, 0x0, r9, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0xfffffff7}}, './file0\x00'})
pipe(&(0x7f0000000e80)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
splice(r12, 0x0, r13, 0x0, 0x2, 0x0)
ioctl$LOOP_SET_STATUS(r13, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x1d, 0x0, "4a4f34f7fefb7ad7df8057870f7e75bd2727779a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35e36f", "8e73c3333672b956a7bd8fa64758269f01025712310ba87b2aab80e073a3a33c", [0x8, 0x8001]})
perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x3, 0x4, 0x8, 0x0, 0x0, 0x7, 0x80020, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xed, 0xff}, 0x11000, 0xffffffffffffffff, 0x5, 0x9, 0x2, 0xff, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r13, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x6, 0x1, r8, 0x805, '\x00', 0x0, r11, 0x4, 0x2, 0x4, 0x9}, 0x48)

04:27:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20004903090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 0:
pipe(&(0x7f0000000e80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000e80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x181800, 0x8) (async)
pipe(&(0x7f0000000e80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipmr_getroute={0x1c, 0x1a, 0x700, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0xb75ba349aca94b8c, 0x1, 0x0, 0x3, 0xfe, 0x5, 0x1600}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x2400c001) (async)
r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x820, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r7}, {0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x4004000) (async)
pipe(&(0x7f0000000e80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r10=>r3, {0x4}}, './file0\x00'})
ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000380)={0x1, 0x101, 0x80, 0x3, 0x7, 0xbc0d}) (async)
splice(r8, 0x0, r9, 0x0, 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0xfffffff7}}, './file0\x00'}) (async)
pipe(&(0x7f0000000e80)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
splice(r12, 0x0, r13, 0x0, 0x2, 0x0)
ioctl$LOOP_SET_STATUS(r13, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x1d, 0x0, "4a4f34f7fefb7ad7df8057870f7e75bd2727779a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35e36f", "8e73c3333672b956a7bd8fa64758269f01025712310ba87b2aab80e073a3a33c", [0x8, 0x8001]}) (async)
perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x3, 0x4, 0x8, 0x0, 0x0, 0x7, 0x80020, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xed, 0xff}, 0x11000, 0xffffffffffffffff, 0x5, 0x9, 0x2, 0xff, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r13, 0xa) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x6, 0x1, r8, 0x805, '\x00', 0x0, r11, 0x4, 0x2, 0x4, 0x9}, 0x48)

[ 1546.333373][T32715] loop2: detected capacity change from 0 to 264192
[ 1546.354186][T32717] loop1: detected capacity change from 0 to 264192
[ 1546.356171][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.360787][T32712] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34003}]}}]}, 0x3c}}, 0x0)

04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000002ed1002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:40 executing program 0:
pipe(&(0x7f0000000e80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x2, 0x0) (async)
pipe(&(0x7f0000000e80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x181800, 0x8) (async)
pipe(&(0x7f0000000e80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipmr_getroute={0x1c, 0x1a, 0x700, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0xb75ba349aca94b8c, 0x1, 0x0, 0x3, 0xfe, 0x5, 0x1600}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x2400c001)
r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x820, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r7}, {0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x4004000) (async)
pipe(&(0x7f0000000e80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r10=>r3, {0x4}}, './file0\x00'})
ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000380)={0x1, 0x101, 0x80, 0x3, 0x7, 0xbc0d}) (async)
splice(r8, 0x0, r9, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0xfffffff7}}, './file0\x00'}) (async)
pipe(&(0x7f0000000e80)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
splice(r12, 0x0, r13, 0x0, 0x2, 0x0) (async)
ioctl$LOOP_SET_STATUS(r13, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x800, 0x12, 0x1d, 0x0, "4a4f34f7fefb7ad7df8057870f7e75bd2727779a84a0db389caa50baedd9090491324aefd8f5181299c89c3488d77ae21a370823651b2427d5de6f429c35e36f", "8e73c3333672b956a7bd8fa64758269f01025712310ba87b2aab80e073a3a33c", [0x8, 0x8001]})
perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x3, 0x4, 0x8, 0x0, 0x0, 0x7, 0x80020, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xed, 0xff}, 0x11000, 0xffffffffffffffff, 0x5, 0x9, 0x2, 0xff, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0xf, r13, 0xa) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x6, 0x1, r8, 0x805, '\x00', 0x0, r11, 0x4, 0x2, 0x4, 0x9}, 0x48)

04:27:40 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0111ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000a0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.369825][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1546.390683][T32722] loop3: detected capacity change from 0 to 264192
[ 1546.398153][T32715] EXT4-fs (loop2): Invalid log block size: 589824
[ 1546.405053][T32717] EXT4-fs (loop1): Invalid log cluster size: 3492675584
[ 1546.417333][T32722] EXT4-fs (loop3): inodes count not valid: 55115808 vs 32
04:27:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20005203090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x5, 0x3, 0x3f, 0x0, 0x8, 0x90400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0x9, 0x2, 0x4, 0x8, 0x81, 0xf854, 0x0, 0x9, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x6, r0, 0x0)

04:27:40 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000002ed2002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1546.467829][T32734] loop4: detected capacity change from 0 to 140
[ 1546.477859][T32733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1546.501787][T32741] loop3: detected capacity change from 0 to 264192
[ 1546.506950][T32734] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1546.519890][T32738] loop2: detected capacity change from 0 to 264192
[ 1546.539638][T32745] loop1: detected capacity change from 0 to 264192
[ 1546.558889][T32738] EXT4-fs (loop2): Invalid log block size: 655360
04:27:40 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0112ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:40 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000b0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.567768][T32741] EXT4-fs (loop3): inodes count not valid: 55705632 vs 32
[ 1546.583889][T32745] EXT4-fs (loop1): Invalid log cluster size: 3526230016
04:27:41 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x5, 0x3, 0x3f, 0x0, 0x8, 0x90400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0x9, 0x2, 0x4, 0x8, 0x81, 0xf854, 0x0, 0x9, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x6, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x5, 0x3, 0x3f, 0x0, 0x8, 0x90400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0x9, 0x2, 0x4, 0x8, 0x81, 0xf854, 0x0, 0x9, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x6, r0, 0x0) (async)

04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34004}]}}]}, 0x3c}}, 0x0)

04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20005a03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.620077][T32749] loop4: detected capacity change from 0 to 140
[ 1546.667069][T32749] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1546.668281][T32756] loop2: detected capacity change from 0 to 264192
[ 1546.702142][T32765] loop3: detected capacity change from 0 to 264192
04:27:41 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x8103}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x5, 0x3, 0x3f, 0x0, 0x8, 0x90400, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0x9, 0x2, 0x4, 0x8, 0x81, 0xf854, 0x0, 0x9, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x6, r0, 0x0)

04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0114ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffffffda002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1546.708786][T23865] I/O error, dev loop1, sector 261104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1546.717949][T32765] EXT4-fs (loop3): inodes count not valid: 56229920 vs 32
[ 1546.753653][  T300] loop1: detected capacity change from 0 to 264192
04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20005d03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34005}]}}]}, 0x3c}}, 0x0)

[ 1546.754546][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.762604][T32756] EXT4-fs (loop2): Invalid log block size: 720896
[ 1546.769334][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1546.785459][  T302] loop4: detected capacity change from 0 to 140
[ 1546.806030][  T302] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:41 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000c0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.808638][  T300] EXT4-fs (loop1): Invalid log cluster size: 3674210303
[ 1546.819193][  T307] loop3: detected capacity change from 0 to 264192
[ 1546.827483][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.838006][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1546.848361][  T307] EXT4-fs (loop3): inodes count not valid: 56426528 vs 32
04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0122ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup3(r1, r0, 0x80000)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @remote}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601040000000000000000059901000700000011000300686173683a69702c706f7274000000000c00078008001240090000000900020073797a300000000005000500"/88], 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0f51df0f000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20041010}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000))
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000340), 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = fcntl$dupfd(r6, 0x0, r7)
poll(&(0x7f0000000180)=[{r3, 0x4040}, {r8, 0x2107}, {r3, 0x28}], 0x3, 0xb5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r6, 0x3000)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000002480)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006203090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000000dc002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1546.890864][T23865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1546.899188][  T313] loop2: detected capacity change from 0 to 264192
[ 1546.900098][T23865] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1546.915309][T23865] Buffer I/O error on dev loop1, logical block 2, async page read
[ 1546.923290][T23865] Buffer I/O error on dev loop1, logical block 3, async page read
04:27:41 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000d0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34006}]}}]}, 0x3c}}, 0x0)

[ 1546.946069][  T315] loop4: detected capacity change from 0 to 140
[ 1546.950724][  T313] EXT4-fs (loop2): Invalid log block size: 786432
[ 1546.965536][  T318] loop3: detected capacity change from 0 to 264192
[ 1546.972898][  T315] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1546.985507][  T318] EXT4-fs (loop3): inodes count not valid: 56754208 vs 32
04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0125ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1546.990365][  T320] loop1: detected capacity change from 0 to 264192
[ 1547.007376][  T320] EXT4-fs (loop1): Invalid log cluster size: 3690987520
[ 1547.025837][  T325] loop2: detected capacity change from 0 to 264192
04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000000de002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006503090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1547.052352][  T328] loop4: detected capacity change from 0 to 140
[ 1547.073868][  T325] EXT4-fs (loop2): Invalid log block size: 851968
04:27:41 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000e0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1547.095600][  T328] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34007}]}}]}, 0x3c}}, 0x0)

04:27:41 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = dup3(r1, r0, 0x80000)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @remote}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601040000000000000000059901000700000011000300686173683a69702c706f7274000000000c00078008001240090000000900020073797a300000000005000500"/88], 0x58}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0f51df0f000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000340), 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
r8 = fcntl$dupfd(r6, 0x0, r7)
poll(&(0x7f0000000180)=[{r3, 0x4040}, {r8, 0x2107}, {r3, 0x28}], 0x3, 0xb5) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r6, 0x3000) (async, rerun: 32)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 64)
write$binfmt_misc(r1, &(0x7f0000002480)=ANY=[], 0xfffffecc) (async, rerun: 64)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

[ 1547.127418][  T332] loop1: detected capacity change from 0 to 264192
[ 1547.134316][  T334] loop2: detected capacity change from 0 to 264192
[ 1547.135681][  T335] loop3: detected capacity change from 0 to 264192
[ 1547.153149][  T332] EXT4-fs (loop1): Invalid log cluster size: 3724541952
[ 1547.161046][  T335] EXT4-fs (loop3): inodes count not valid: 56950816 vs 32
[ 1547.164280][  T334] EXT4-fs (loop2): Invalid log block size: 917504
04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0126ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20006903090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000001de002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:41 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000f0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34008}]}}]}, 0x3c}}, 0x0)

[ 1547.231553][  T345] loop4: detected capacity change from 0 to 140
[ 1547.263808][  T353] loop1: detected capacity change from 0 to 264192
[ 1547.271993][  T356] loop2: detected capacity change from 0 to 264192
04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffffffe2002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1547.272621][  T357] loop3: detected capacity change from 0 to 264192
[ 1547.287016][  T345] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1547.297184][  T357] EXT4-fs (loop3): inodes count not valid: 57212960 vs 32
[ 1547.305394][  T353] EXT4-fs (loop1): Invalid log cluster size: 3724607488
04:27:41 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = dup3(r1, r0, 0x80000)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @remote}}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601040000000000000000059901000700000011000300686173683a69702c706f7274000000000c00078008001240090000000900020073797a300000000005000500"/88], 0x58}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0f51df0f000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20041010}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000340), 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = fcntl$dupfd(r6, 0x0, r7)
poll(&(0x7f0000000180)=[{r3, 0x4040}, {r8, 0x2107}, {r3, 0x28}], 0x3, 0xb5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r6, 0x3000) (async)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000002480)=ANY=[], 0xfffffecc) (async)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20008103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0146ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000100000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1547.334185][  T361] loop1: detected capacity change from 0 to 264192
[ 1547.334894][T22835] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1547.354995][  T356] EXT4-fs (loop2): Invalid log block size: 983040
[ 1547.376631][  T361] EXT4-fs (loop1): Invalid log cluster size: 3808428031
04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000000ea002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1547.408739][  T366] loop3: detected capacity change from 0 to 264192
[ 1547.411238][  T367] loop4: detected capacity change from 0 to 140
[ 1547.435058][  T371] loop2: detected capacity change from 0 to 264192
04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34009}]}}]}, 0x3c}}, 0x0)

04:27:41 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0148ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1547.450109][  T367] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1547.467748][  T371] EXT4-fs (loop2): Invalid log block size: 1048576
[ 1547.471880][  T373] loop1: detected capacity change from 0 to 264192
[ 1547.474706][  T366] EXT4-fs (loop3): inodes count not valid: 58785824 vs 32
[ 1547.496417][  T373] EXT4-fs (loop1): Invalid log cluster size: 3925868544
04:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x3400a}]}}]}, 0x3c}}, 0x0)

04:27:41 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000110000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffff0002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:41 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20008203090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:41 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f014cffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1547.537661][  T380] loop4: detected capacity change from 0 to 140
[ 1547.550872][  T380] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) (async, rerun: 32)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x3400b}]}}]}, 0x3c}}, 0x0)

[ 1547.612560][  T390] loop3: detected capacity change from 0 to 264192
[ 1547.629755][  T394] loop1: detected capacity change from 0 to 264192
[ 1547.637194][  T388] loop4: detected capacity change from 0 to 140
[ 1547.645445][  T392] loop2: detected capacity change from 0 to 264192
[ 1547.655825][  T392] EXT4-fs (loop2): Invalid log block size: 1114112
04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20008503090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x3400c}]}}]}, 0x3c}}, 0x0)

04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000120000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffff6002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1547.668114][  T394] EXT4-fs (loop1): Invalid log cluster size: 4043309055
[ 1547.675104][  T390] EXT4-fs (loop3): inodes count not valid: 58851360 vs 32
[ 1547.683536][  T388] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0155ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1547.739973][  T404] loop3: detected capacity change from 0 to 264192
[ 1547.751175][  T407] loop2: detected capacity change from 0 to 264192
[ 1547.751713][  T408] loop1: detected capacity change from 0 to 264192
[ 1547.762293][  T410] loop4: detected capacity change from 0 to 140
[ 1547.772528][  T407] EXT4-fs (loop2): Invalid log block size: 1179648
04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x3400f}]}}]}, 0x3c}}, 0x0)

04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000b103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1547.796693][  T404] EXT4-fs (loop3): inodes count not valid: 59047968 vs 32
[ 1547.797079][  T408] EXT4-fs (loop1): Invalid log cluster size: 4143972351
[ 1547.811177][  T410] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000140000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0160ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1547.856725][  T419] loop3: detected capacity change from 0 to 264192
[ 1547.860029][T24855]  loop3: unable to read partition table
04:27:42 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000407f8002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1547.901290][  T423] loop4: detected capacity change from 0 to 140
[ 1547.916635][  T419] EXT4-fs (loop3): inodes count not valid: 61931552 vs 32
[ 1547.922293][  T428] loop1: detected capacity change from 0 to 264192
[ 1547.931892][  T425] loop2: detected capacity change from 0 to 264192
[ 1547.942041][  T425] EXT4-fs (loop2): Invalid log block size: 1310720
04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000c103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffdf9002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000180000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34010}]}}]}, 0x3c}}, 0x0)

[ 1547.950211][  T428] EXT4-fs (loop1): Invalid log cluster size: 4161209344
[ 1547.969113][  T423] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0168ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1548.024779][  T432] loop1: detected capacity change from 0 to 264192
[ 1548.038022][  T435] loop3: detected capacity change from 0 to 264192
[ 1548.051363][  T434] loop2: detected capacity change from 0 to 264192
[ 1548.065168][  T440] loop4: detected capacity change from 0 to 140
04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34011}]}}]}, 0x3c}}, 0x0)

04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000c903090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1548.074721][  T435] EXT4-fs (loop3): inodes count not valid: 62980128 vs 32
[ 1548.082947][  T432] EXT4-fs (loop1): Invalid log cluster size: 4194172927
[ 1548.093102][  T434] EXT4-fs (loop2): Invalid log block size: 1572864
[ 1548.104534][  T440] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f016cffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000001b0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffffb002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1548.166030][  T447] loop3: detected capacity change from 0 to 264192
[ 1548.192605][  T449] loop4: detected capacity change from 0 to 140
[ 1548.196501][ T1437]  loop4: unable to read partition table
04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34060}]}}]}, 0x3c}}, 0x0)

04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0174ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.214318][  T455] loop2: detected capacity change from 0 to 264192
[ 1548.216591][ T1437]  loop2: unable to read partition table
[ 1548.221611][  T456] loop1: detected capacity change from 0 to 264192
[ 1548.233453][  T447] EXT4-fs (loop3): inodes count not valid: 63504416 vs 32
[ 1548.247269][  T449] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000cd03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000220000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.277482][  T455] EXT4-fs (loop2): Invalid log block size: 1769472
[ 1548.293396][  T456] EXT4-fs (loop1): Invalid log cluster size: 4227858431
04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0xf}}, 0x0)

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1548.334908][  T465] loop4: detected capacity change from 0 to 140
[ 1548.350357][  T467] loop2: detected capacity change from 0 to 264192
[ 1548.360493][  T468] loop3: detected capacity change from 0 to 264192
[ 1548.372140][  T467] EXT4-fs (loop2): Invalid log block size: 2228224
04:27:42 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffdfd002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000250000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.382806][  T465] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1548.393222][  T468] EXT4-fs (loop3): inodes count not valid: 63766560 vs 32
[ 1548.412786][  T476] loop1: detected capacity change from 0 to 264192
04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000ce03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f017affff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x10}}, 0x0)

[ 1548.432238][  T476] EXT4-fs (loop1): Invalid log cluster size: 4261281791
[ 1548.446442][  T478] loop2: detected capacity change from 0 to 264192
[ 1548.450529][T23865]  loop2: unable to read partition table
[ 1548.459153][  T480] loop4: detected capacity change from 0 to 140
04:27:42 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000260000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0184ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffffe002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1548.481381][  T478] EXT4-fs (loop2): Invalid log block size: 2424832
[ 1548.493037][  T480] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1548.500244][  T486] loop3: detected capacity change from 0 to 264192
[ 1548.519489][  T486] EXT4-fs (loop3): inodes count not valid: 63832096 vs 32
04:27:42 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000dc03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:42 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0))

04:27:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x24}}, 0x0)

[ 1548.569377][  T491] loop2: detected capacity change from 0 to 264192
[ 1548.573838][  T494] loop1: detected capacity change from 0 to 264192
[ 1548.578024][  T493] loop4: detected capacity change from 0 to 140
[ 1548.605305][  T494] EXT4-fs (loop1): Invalid log cluster size: 4278190079
[ 1548.610939][  T497] loop3: detected capacity change from 0 to 264192
04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000fff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000dd03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.625558][  T491] EXT4-fs (loop2): Invalid log block size: 2490368
[ 1548.633453][  T493] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1548.643874][  T497] EXT4-fs (loop3): inodes count not valid: 64749600 vs 32
04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0xc0}}, 0x0)

04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f018cffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000320000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0))

[ 1548.694447][  T503] loop1: detected capacity change from 0 to 264192
[ 1548.729875][  T503] EXT4-fs (loop1): Invalid log cluster size: 4279173120
[ 1548.737481][  T508] loop2: detected capacity change from 0 to 264192
04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffffefff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000370000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.744565][  T510] loop4: detected capacity change from 0 to 140
[ 1548.761475][  T514] loop3: detected capacity change from 0 to 264192
[ 1548.771190][  T510] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1548.784858][  T508] EXT4-fs (loop2): Invalid log block size: 3276800
04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0xec0}}, 0x0)

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000003e0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f01feffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.816513][  T514] EXT4-fs (loop3): inodes count not valid: 64815136 vs 32
04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1548.861292][  T523] loop1: detected capacity change from 0 to 264192
[ 1548.868194][  T526] loop2: detected capacity change from 0 to 264192
[ 1548.890170][  T529] loop3: detected capacity change from 0 to 264192
[ 1548.900868][  T527] loop4: detected capacity change from 0 to 140
04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80))
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffffbff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000460000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff09ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.910088][  T526] EXT4-fs (loop2): Invalid log block size: 4063232
[ 1548.923005][  T523] EXT4-fs (loop1): Invalid log cluster size: 4293918719
[ 1548.933956][  T527] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1548.939359][  T529] EXT4-fs (loop3): inodes count not valid: 65077280 vs 32
04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x33fe0}}, 0x0)

04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e503090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1548.988316][  T537] loop2: detected capacity change from 0 to 264192
[ 1549.004535][  T539] loop1: detected capacity change from 0 to 264192
[ 1549.011417][  T537] EXT4-fs (loop2): Invalid log block size: 4587520
[ 1549.022024][  T540] loop4: detected capacity change from 0 to 140
04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000e803090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x7ffff000}}, 0x0)

04:27:43 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000480000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1549.040284][  T544] loop3: detected capacity change from 0 to 264192
[ 1549.041608][T23865]  loop3: unable to read partition table
[ 1549.058081][  T540] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 1549.064718][  T544] EXT4-fs (loop3): inodes count not valid: 65339424 vs 32
[ 1549.075399][  T539] EXT4-fs (loop1): Invalid log cluster size: 4294705151
04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff25ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000ea03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000000003ffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0xfffffdef}}, 0x0)

[ 1549.131961][  T557] loop4: detected capacity change from 0 to 140
[ 1549.133234][  T555] loop2: detected capacity change from 0 to 264192
[ 1549.146267][  T557] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
04:27:43 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef020001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000004a0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1549.179931][  T555] EXT4-fs (loop2): Invalid log block size: 4718592
[ 1549.187732][  T559] loop3: detected capacity change from 0 to 264192
04:27:43 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

[ 1549.222842][  T559] EXT4-fs (loop3): inodes count not valid: 65667104 vs 32
[ 1549.229124][  T565] loop1: detected capacity change from 0 to 264192
[ 1549.241007][  T565] EXT4-fs (loop1): Invalid log cluster size: 4294902528
[ 1549.251646][  T567] loop4: detected capacity change from 0 to 140
04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000ee03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x7ffffffff000}}, 0x0)

04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000001fffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000004c0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef030001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1549.268916][  T569] loop2: detected capacity change from 0 to 264192
[ 1549.282898][  T569] EXT4-fs (loop2): Invalid log block size: 4849664
[ 1549.293079][  T567] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1549.310991][  T573] loop3: detected capacity change from 0 to 264192
04:27:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

[ 1549.359286][  T580] loop1: detected capacity change from 0 to 264192
[ 1549.370363][  T573] EXT4-fs (loop3): inodes count not valid: 65929248 vs 32
[ 1549.374499][  T582] loop2: detected capacity change from 0 to 264192
[ 1549.380288][T23865]  loop2: unable to read partition table
[ 1549.395765][  T580] EXT4-fs (loop1): Invalid log cluster size: 4294909696
04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f103090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000055aaffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000510000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1549.405586][  T582] EXT4-fs (loop2): Invalid log block size: 4980736
[ 1549.421300][  T586] loop4: detected capacity change from 0 to 140
[ 1549.440783][  T589] loop1: detected capacity change from 0 to 264192
04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x2}, 0x0)

[ 1549.464564][  T592] loop3: detected capacity change from 0 to 264192
[ 1549.470705][  T586] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1549.494997][  T594] loop2: detected capacity change from 0 to 264192
[ 1549.500510][  T592] EXT4-fs (loop3): inodes count not valid: 66125856 vs 32
04:27:43 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x7}, 0x0)

04:27:43 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef040001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1549.506598][  T589] EXT4-fs (loop1): Invalid log cluster size: 4294945365
[ 1549.516262][  T594] EXT4-fs (loop2): Invalid log block size: 5308416
04:27:43 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f203090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000600000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:43 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000ffefffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1549.609286][  T603] loop4: detected capacity change from 0 to 140
[ 1549.619568][  T608] loop2: detected capacity change from 0 to 264192
[ 1549.626302][  T603] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1549.629150][  T607] loop3: detected capacity change from 0 to 264192
[ 1549.648827][  T610] loop1: detected capacity change from 0 to 264192
04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef050001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x8}, 0x0)

[ 1549.660319][  T608] EXT4-fs (loop2): Invalid log block size: 6291456
[ 1549.668786][  T610] EXT4-fs (loop1): Invalid log cluster size: 4294963199
[ 1549.679723][  T607] EXT4-fs (loop3): inodes count not valid: 66191392 vs 32
04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000680000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f503090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fffbffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1549.706447][  T614] loop4: detected capacity change from 0 to 140
[ 1549.754365][  T621] loop1: detected capacity change from 0 to 264192
[ 1549.754477][  T622] loop2: detected capacity change from 0 to 264192
[ 1549.774848][  T614] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1549.784640][  T626] loop3: detected capacity change from 0 to 264192
[ 1549.784676][  T621] EXT4-fs (loop1): Invalid log cluster size: 4294966271
04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef060001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000f9fdffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0xf}, 0x0)

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1549.801025][  T622] EXT4-fs (loop2): Invalid log block size: 6815744
[ 1549.819217][  T626] EXT4-fs (loop3): inodes count not valid: 66388000 vs 32
[ 1549.837727][  T630] loop4: detected capacity change from 0 to 140
04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f603090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000006c0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1549.856986][  T634] loop1: detected capacity change from 0 to 264192
[ 1549.865597][  T634] EXT4-fs (loop1): Invalid log cluster size: 4294966777
[ 1549.882381][  T630] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x300}, 0x0)

04:27:44 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fdfdffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef070001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1549.921398][  T639] loop2: detected capacity change from 0 to 264192
[ 1549.921555][  T638] loop3: detected capacity change from 0 to 264192
[ 1549.936188][  T639] EXT4-fs (loop2): Invalid log block size: 7077888
[ 1549.944871][  T638] EXT4-fs (loop3): inodes count not valid: 66453536 vs 32
[ 1549.979835][  T646] loop4: detected capacity change from 0 to 140
[ 1549.985610][  T647] loop1: detected capacity change from 0 to 264192
[ 1549.995428][  T644] __nla_validate_parse: 30 callbacks suppressed
[ 1549.995440][  T644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1549.995545][  T646] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000f903090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000740000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1550.023813][  T647] EXT4-fs (loop1): Invalid log cluster size: 4294966781
04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x2}, 0x0)

04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef080001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.063420][  T652] loop3: detected capacity change from 0 to 264192
[ 1550.063742][T23865]  loop3: unable to read partition table
[ 1550.076611][  T653] loop2: detected capacity change from 0 to 264192
[ 1550.095280][  T653] EXT4-fs (loop2): Invalid log block size: 7602176
[ 1550.096483][  T652] EXT4-fs (loop3): inodes count not valid: 66650144 vs 32
04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000007a0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fa03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000007fffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1550.115175][  T660] loop4: detected capacity change from 0 to 140
[ 1550.116059][  T658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000fd03090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x3}, 0x0)

[ 1550.176506][  T663] loop2: detected capacity change from 0 to 264192
[ 1550.177060][  T660] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1550.192912][  T665] loop1: detected capacity change from 0 to 264192
04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x4}, 0x0)

04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef0a0001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.240900][  T663] EXT4-fs (loop2): Invalid log block size: 7995392
[ 1550.245464][  T671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1550.257092][  T673] loop3: detected capacity change from 0 to 264192
[ 1550.260674][  T665] EXT4-fs (loop1): Invalid log cluster size: 4294967167
[ 1550.275340][  T673] EXT4-fs (loop3): inodes count not valid: 66912288 vs 32
04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000980000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.316367][  T678] loop4: detected capacity change from 0 to 140
[ 1550.324026][  T678] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1550.343424][  T682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:44 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f00000001000000000000008cffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000204090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef0f0001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.362715][  T683] loop2: detected capacity change from 0 to 264192
04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1550.389513][  T683] EXT4-fs (loop2): Invalid log block size: 9961472
[ 1550.406451][  T688] loop1: detected capacity change from 0 to 264192
[ 1550.406579][ T1437]  loop1: unable to read partition table
[ 1550.416115][  T689] loop3: detected capacity change from 0 to 264192
[ 1550.427372][  T689] EXT4-fs (loop3): inodes count not valid: 67239968 vs 32
04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x5}, 0x0)

[ 1550.430723][  T691] loop4: detected capacity change from 0 to 140
[ 1550.445873][  T688] EXT4-fs (loop1): Invalid log cluster size: 4294967180
[ 1550.453175][  T691] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000ad0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000604090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000c9ffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1550.494538][  T694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1550.509088][  T697] loop3: detected capacity change from 0 to 264192
[ 1550.517081][  T698] loop2: detected capacity change from 0 to 264192
[ 1550.518150][T23865]  loop2: unable to read partition table
04:27:44 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef100001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000b20000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.539062][  T698] EXT4-fs (loop2): Invalid log block size: 11337728
[ 1550.546706][  T697] EXT4-fs (loop3): inodes count not valid: 67502112 vs 32
[ 1550.554854][  T702] loop1: detected capacity change from 0 to 264192
04:27:44 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000cb0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001004090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:44 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x6}, 0x0)

[ 1550.594972][  T702] EXT4-fs (loop1): Invalid log cluster size: 4294967241
[ 1550.626417][  T713] loop4: detected capacity change from 0 to 140
[ 1550.631512][  T715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1550.652171][  T718] loop3: detected capacity change from 0 to 264192
[ 1550.652779][  T712] loop2: detected capacity change from 0 to 264192
[ 1550.681425][  T713] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x7}, 0x0)

04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000daffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:45 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef140001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.703044][  T718] EXT4-fs (loop3): inodes count not valid: 68157472 vs 32
[ 1550.704350][  T712] EXT4-fs (loop2): Invalid log block size: 13303808
[ 1550.728348][  T723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000005090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000d00000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.763888][  T727] loop1: detected capacity change from 0 to 264192
[ 1550.766546][  T728] loop4: detected capacity change from 0 to 140
[ 1550.777136][  T727] EXT4-fs (loop1): Invalid log cluster size: 4294967258
[ 1550.800090][  T728] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1550.816298][  T733] loop3: detected capacity change from 0 to 264192
[ 1550.818087][  T735] loop2: detected capacity change from 0 to 264192
[ 1550.826886][ T1437] blk_print_req_error: 28 callbacks suppressed
[ 1550.826897][ T1437] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1550.837359][  T733] EXT4-fs (loop3): inodes count not valid: 83886112 vs 32
[ 1550.844662][ T1437] buffer_io_error: 21 callbacks suppressed
[ 1550.844673][ T1437] Buffer I/O error on dev loop2, logical block 0, async page read
04:27:45 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000e2ffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x8}, 0x0)

04:27:45 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef260001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000006090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.872734][  T735] EXT4-fs (loop2): Invalid log block size: 13631488
[ 1550.889926][T23865] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000d30000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1550.934838][  T744] loop1: detected capacity change from 0 to 264192
[ 1550.936769][  T745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1550.948823][  T746] loop3: detected capacity change from 0 to 264192
[ 1550.960894][  T743] loop4: detected capacity change from 0 to 140
[ 1550.978165][  T744] EXT4-fs (loop1): Invalid log cluster size: 4294967266
04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x9}, 0x0)

[ 1550.990473][  T750] loop2: detected capacity change from 0 to 264192
[ 1551.006153][  T743] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1551.030508][  T746] EXT4-fs (loop3): inodes count not valid: 100663328 vs 32
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000f0ffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000406090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.041771][  T750] EXT4-fs (loop2): Invalid log block size: 13828096
[ 1551.045501][  T754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000dc0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef460001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xa}, 0x0)

[ 1551.131297][  T761] loop2: detected capacity change from 0 to 264192
[ 1551.136927][  T765] loop1: detected capacity change from 0 to 264192
[ 1551.142269][  T763] loop3: detected capacity change from 0 to 264192
[ 1551.157689][  T766] loop4: detected capacity change from 0 to 140
[ 1551.164518][  T761] EXT4-fs (loop2): Invalid log block size: 14417920
[ 1551.166243][  T768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xb}, 0x0)

04:27:45 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000ea0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000f6ffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:45 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef640001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.174313][  T765] EXT4-fs (loop1): Invalid log cluster size: 4294967280
[ 1551.191093][  T766] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1551.202763][  T763] EXT4-fs (loop3): inodes count not valid: 100925472 vs 32
04:27:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000007090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.274203][  T779] loop2: detected capacity change from 0 to 264192
[ 1551.278360][ T1437] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.289916][ T1437] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1551.298601][  T780] loop1: detected capacity change from 0 to 264192
[ 1551.305355][  T781] loop3: detected capacity change from 0 to 264192
[ 1551.305505][  T779] EXT4-fs (loop2): Invalid log block size: 15335424
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xc}, 0x0)

04:27:45 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000ec0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000fbffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1551.316019][  T783] loop4: detected capacity change from 0 to 140
[ 1551.322911][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.333954][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1551.333991][  T780] EXT4-fs (loop1): Invalid log cluster size: 4294967286
[ 1551.334824][  T781] EXT4-fs (loop3): inodes count not valid: 117440544 vs 32
[ 1551.360733][  T783] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:45 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000fe0000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:45 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53effe0001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.415266][  T793] loop1: detected capacity change from 0 to 264192
[ 1551.425528][T23865] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.434743][T23865] Buffer I/O error on dev loop4, logical block 0, async page read
04:27:45 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000009090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.462253][T23865] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.471504][T23865] Buffer I/O error on dev loop4, logical block 2, async page read
[ 1551.480052][T23865] I/O error, dev loop4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.489255][T23865] Buffer I/O error on dev loop4, logical block 3, async page read
04:27:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xf}, 0x0)

04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1551.510403][  T798] loop3: detected capacity change from 0 to 264192
[ 1551.512187][T22835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.518160][  T793] EXT4-fs (loop1): Invalid log cluster size: 4294967291
[ 1551.526033][T22835] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1551.544741][  T797] loop2: detected capacity change from 0 to 264192
04:27:45 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00"/16], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:45 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef000301000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00"/16], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000feffffff002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000000a0100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.562559][  T805] loop4: detected capacity change from 0 to 140
[ 1551.574825][  T805] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1551.589098][  T797] EXT4-fs (loop2): Invalid log block size: 16646144
[ 1551.598701][  T798] EXT4-fs (loop3): inodes count not valid: 150994976 vs 32
04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000109090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x10}, 0x0)

[ 1551.649560][  T814] loop1: detected capacity change from 0 to 264192
[ 1551.658769][  T813] loop2: detected capacity change from 0 to 264192
[ 1551.664815][  T816] loop4: detected capacity change from 0 to 140
[ 1551.680723][  T816] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1551.690286][  T814] EXT4-fs (loop1): Invalid log cluster size: 4294967294
04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00"/16], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53efe60601000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.694316][  T819] loop3: detected capacity change from 0 to 264192
[ 1551.704255][  T813] EXT4-fs (loop2): Invalid log block size: 17432576
[ 1551.723356][  T819] EXT4-fs (loop3): inodes count not valid: 151060512 vs 32
[ 1551.742196][  T824] loop4: detected capacity change from 0 to 140
04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x11}, 0x0)

04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000a090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000002c0100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000000004000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1551.742551][T23865] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.757648][T23865] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1551.781299][  T827] loop3: detected capacity change from 0 to 264192
04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53effa0f01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.802820][  T824] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1551.812514][  T831] loop2: detected capacity change from 0 to 264192
[ 1551.815163][T23865] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1551.828205][T23865] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1551.839611][  T827] EXT4-fs (loop3): inodes count not valid: 167772192 vs 32
04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000500100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1551.854870][  T831] EXT4-fs (loop2): Invalid log block size: 19660800
[ 1551.881510][  T837] loop1: detected capacity change from 0 to 264192
04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x60}, 0x0)

04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000b090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1551.906544][  T840] loop4: detected capacity change from 0 to 140
[ 1551.925841][  T842] loop2: detected capacity change from 0 to 264192
[ 1551.933613][  T837] EXT4-fs (loop1): #blocks per group too big: 16384
[ 1551.938931][  T844] loop3: detected capacity change from 0 to 264192
[ 1551.946907][  T842] EXT4-fs (loop2): Invalid log block size: 22020096
04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x300}, 0x0)

04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000005c0100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000000000006000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1551.954691][  T840] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1551.965120][  T844] EXT4-fs (loop3): inodes count not valid: 184549408 vs 32
04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000c090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef004401000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.026380][  T854] loop1: detected capacity change from 0 to 264192
[ 1552.041765][  T858] loop2: detected capacity change from 0 to 264192
[ 1552.055071][  T859] loop3: detected capacity change from 0 to 264192
[ 1552.062515][  T854] EXT4-fs (loop1): #blocks per group too big: 24576
04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000020000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x500}, 0x0)

04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1552.081849][  T861] loop4: detected capacity change from 0 to 140
[ 1552.094749][  T858] EXT4-fs (loop2): Invalid log block size: 22806528
[ 1552.111611][  T859] EXT4-fs (loop3): inodes count not valid: 201326624 vs 32
04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000005e0100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000d090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.131432][  T861] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1552.145288][  T865] loop1: detected capacity change from 0 to 264192
04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef004601000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.173959][  T865] EXT4-fs (loop1): Invalid log cluster size: 512
[ 1552.195070][  T870] loop3: detected capacity change from 0 to 264192
[ 1552.202975][  T873] loop2: detected capacity change from 0 to 264192
04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x5c1}, 0x0)

04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000030000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000e090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.220083][  T873] EXT4-fs (loop2): Invalid log block size: 22937600
[ 1552.222691][  T875] loop4: detected capacity change from 0 to 140
[ 1552.243820][  T870] EXT4-fs (loop3): inodes count not valid: 218103840 vs 32
04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000640100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1552.267577][  T875] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1552.289355][  T880] loop2: detected capacity change from 0 to 264192
[ 1552.307072][  T880] EXT4-fs (loop2): Invalid log block size: 23330816
[ 1552.314726][  T885] loop3: detected capacity change from 0 to 264192
04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x600}, 0x0)

04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef106501000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000aa0100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.314855][  T881] loop1: detected capacity change from 0 to 264192
[ 1552.331121][  T885] EXT4-fs (loop3): inodes count not valid: 234881056 vs 32
[ 1552.342172][  T881] EXT4-fs (loop1): Invalid log cluster size: 768
04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1552.368532][  T887] loop2: detected capacity change from 0 to 264192
[ 1552.384488][  T892] loop4: detected capacity change from 0 to 140
[ 1552.388152][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1552.402279][  T892] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1552.412464][  T887] EXT4-fs (loop2): Invalid log block size: 27918336
04:27:46 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000f090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000040000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53effeff01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x700}, 0x0)

04:27:46 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

[ 1552.455021][  T897] loop3: detected capacity change from 0 to 264192
[ 1552.487040][  T897] EXT4-fs (loop3): inodes count not valid: 251658272 vs 32
04:27:46 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000c00100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:46 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000050000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:46 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000410090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.504880][  T905] loop4: detected capacity change from 0 to 140
[ 1552.512528][  T902] loop1: detected capacity change from 0 to 264192
[ 1552.526440][  T902] EXT4-fs (loop1): Invalid log cluster size: 1024
[ 1552.527163][  T905] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:46 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:46 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010300000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.571215][  T908] loop2: detected capacity change from 0 to 264192
[ 1552.595752][  T913] loop3: detected capacity change from 0 to 264192
[ 1552.605996][  T910] loop1: detected capacity change from 0 to 264192
04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x900}, 0x0)

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010400000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20002010090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000060000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000de0100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.618886][  T908] EXT4-fs (loop2): Invalid log block size: 29360128
[ 1552.626518][  T913] EXT4-fs (loop3): inodes count not valid: 268697632 vs 32
[ 1552.627086][  T917] loop4: detected capacity change from 0 to 140
[ 1552.634773][  T910] EXT4-fs (loop1): Invalid log cluster size: 1280
[ 1552.646595][  T917] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:47 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

[ 1552.703945][  T921] loop3: detected capacity change from 0 to 264192
[ 1552.719947][  T926] loop2: detected capacity change from 0 to 264192
[ 1552.722702][ T1437]  loop2: unable to read partition table
[ 1552.734740][  T929] loop1: detected capacity change from 0 to 264192
[ 1552.747221][  T926] EXT4-fs (loop2): Invalid log block size: 31326208
04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000011090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.752458][  T929] EXT4-fs (loop1): Invalid log cluster size: 1536
[ 1552.759955][  T927] loop4: detected capacity change from 0 to 140
[ 1552.762263][ T1437]  loop4: unable to read partition table
[ 1552.770794][  T921] EXT4-fs (loop3): inodes count not valid: 270532640 vs 32
04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xa00}, 0x0)

04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000e00100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000070000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1552.807331][  T927] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xb00}, 0x0)

04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef011000000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1552.874005][  T938] loop1: detected capacity change from 0 to 264192
[ 1552.882930][  T939] loop2: detected capacity change from 0 to 264192
[ 1552.896056][  T942] loop3: detected capacity change from 0 to 264192
[ 1552.905851][  T942] EXT4-fs (loop3): inodes count not valid: 285212704 vs 32
04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xc00}, 0x0)

04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000012090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000080000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1552.923490][  T938] EXT4-fs (loop1): Invalid log cluster size: 1792
[ 1552.931379][  T939] EXT4-fs (loop2): Invalid log block size: 31457280
[ 1552.938614][  T946] loop4: detected capacity change from 0 to 140
[ 1552.946520][  T946] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000040200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef014400000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

[ 1553.026134][  T955] loop1: detected capacity change from 0 to 264192
[ 1553.033729][  T956] loop2: detected capacity change from 0 to 264192
[ 1553.037506][  T954] loop3: detected capacity change from 0 to 264192
[ 1553.050492][  T958] loop4: detected capacity change from 0 to 140
[ 1553.059914][  T954] EXT4-fs (loop3): inodes count not valid: 301989920 vs 32
[ 1553.068749][  T955] EXT4-fs (loop1): Invalid log cluster size: 2048
04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xf00}, 0x0)

04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000090000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000014090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef014600000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1553.070090][  T958] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1553.075267][  T956] EXT4-fs (loop2): Invalid log block size: 33816576
04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000380200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x1100}, 0x0)

[ 1553.160983][  T968] loop1: detected capacity change from 0 to 264192
[ 1553.175999][  T972] loop3: detected capacity change from 0 to 264192
[ 1553.186331][  T971] loop4: detected capacity change from 0 to 140
04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x4788}, 0x0)

04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1553.212907][  T973] loop2: detected capacity change from 0 to 264192
[ 1553.221690][  T968] EXT4-fs (loop1): Invalid log cluster size: 2304
[ 1553.228254][  T972] EXT4-fs (loop3): inodes count not valid: 335544352 vs 32
[ 1553.240344][  T973] EXT4-fs (loop2): Invalid log block size: 37224448
[ 1553.243114][  T971] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000a0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010201000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000550200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000016090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1553.323628][  T984] loop1: detected capacity change from 0 to 264192
[ 1553.331552][  T990] loop3: detected capacity change from 0 to 264192
[ 1553.332986][  T992] loop2: detected capacity change from 0 to 264192
[ 1553.350571][  T986] loop4: detected capacity change from 0 to 140
[ 1553.352845][T23865]  loop4: unable to read partition table
[ 1553.364982][  T992] EXT4-fs (loop2): Invalid log block size: 39124992
04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x4888}, 0x0)

04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000a20200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1553.379988][  T984] EXT4-fs (loop1): Invalid log cluster size: 2560
[ 1553.390952][  T990] EXT4-fs (loop3): inodes count not valid: 369098784 vs 32
[ 1553.409095][  T986] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000b0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1553.429172][  T998] loop2: detected capacity change from 0 to 264192
04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000017090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010301000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1553.455487][ T1002] loop1: detected capacity change from 0 to 264192
[ 1553.488086][  T998] EXT4-fs (loop2): Invalid log block size: 44171264
04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x5865}, 0x0)

04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000c40200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1553.504373][ T1005] loop4: detected capacity change from 0 to 140
[ 1553.505161][ T1006] loop3: detected capacity change from 0 to 264192
[ 1553.522349][ T1005] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1553.532149][ T1002] EXT4-fs (loop1): Invalid log cluster size: 2816
[ 1553.536558][ T1006] EXT4-fs (loop3): inodes count not valid: 385876000 vs 32
04:27:47 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000018090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010401000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:47 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:47 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000c0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1553.603392][ T1019] loop2: detected capacity change from 0 to 264192
[ 1553.611702][ T1021] loop3: detected capacity change from 0 to 264192
[ 1553.620065][ T1023] loop4: detected capacity change from 0 to 140
[ 1553.626445][ T1019] EXT4-fs (loop2): Invalid log block size: 46399488
[ 1553.628808][ T1024] loop1: detected capacity change from 0 to 264192
[ 1553.646392][ T1024] EXT4-fs (loop1): Invalid log cluster size: 3072
04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x6000}, 0x0)

04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000d60200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1553.654115][ T1023] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1553.676031][ T1021] EXT4-fs (loop3): inodes count not valid: 402653216 vs 32
04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000001b090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010501000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000d0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000011d090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1553.712910][ T1030] loop2: detected capacity change from 0 to 264192
[ 1553.739298][ T1030] EXT4-fs (loop2): Invalid log block size: 47579136
04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1553.776018][ T1038] loop1: detected capacity change from 0 to 264192
[ 1553.786568][ T1043] loop4: detected capacity change from 0 to 140
[ 1553.799464][ T1045] loop3: detected capacity change from 0 to 264192
[ 1553.810216][ T1045] EXT4-fs (loop3): inodes count not valid: 486604832 vs 32
04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000de0200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x6558}, 0x0)

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300))
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010601000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000011e090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300))
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1553.822254][ T1043] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1553.826584][ T1038] EXT4-fs (loop1): Invalid log cluster size: 3328
[ 1553.861753][ T1052] loop2: detected capacity change from 0 to 264192
04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000e0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x8100}, 0x0)

[ 1553.901738][ T1052] EXT4-fs (loop2): Invalid log block size: 48103424
[ 1553.906256][ T1058] loop3: detected capacity change from 0 to 264192
[ 1553.916224][ T1055] loop4: detected capacity change from 0 to 140
[ 1553.929698][ T1058] EXT4-fs (loop3): inodes count not valid: 503382048 vs 32
[ 1553.940600][ T1055] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300))
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

[ 1553.948601][ T1064] loop1: detected capacity change from 0 to 264192
04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000031e090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0))

04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010701000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1553.975623][ T1064] EXT4-fs (loop1): Invalid log cluster size: 3584
[ 1553.994285][ T1069] loop2: detected capacity change from 0 to 264192
[ 1554.014771][ T1069] EXT4-fs (loop2): Invalid log block size: 50331648
04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x8847}, 0x0)

04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000340300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0))

04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000000f0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1554.024033][ T1074] loop3: detected capacity change from 0 to 264192
[ 1554.033699][ T1075] loop4: detected capacity change from 0 to 140
[ 1554.045695][ T1075] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1554.055629][ T1074] EXT4-fs (loop3): inodes count not valid: 503513120 vs 32
04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010801000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000020090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0))

[ 1554.105297][ T1084] loop1: detected capacity change from 0 to 264192
[ 1554.105715][T23865]  loop1: unable to read partition table
[ 1554.120146][ T1082] loop2: detected capacity change from 0 to 264192
[ 1554.134028][ T1082] EXT4-fs (loop2): Invalid log block size: 53739520
[ 1554.137910][ T1089] loop3: detected capacity change from 0 to 264192
[ 1554.144324][ T1088] loop4: detected capacity change from 0 to 140
04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000100000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000490300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

[ 1554.153011][T22835]  loop4: unable to read partition table
[ 1554.159111][ T1084] EXT4-fs (loop1): Invalid log cluster size: 3840
[ 1554.171122][ T1088] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1554.181314][ T1089] EXT4-fs (loop3): inodes count not valid: 536870944 vs 32
04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000110000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x8848}, 0x0)

[ 1554.213479][ T1095] loop2: detected capacity change from 0 to 264192
[ 1554.214337][T22835]  loop2: unable to read partition table
04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000120000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010901000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000320090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1554.255616][ T1095] EXT4-fs (loop2): Invalid log block size: 55115776
04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f0000000100000000004e0300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

[ 1554.301370][ T1108] loop4: detected capacity change from 0 to 140
[ 1554.309432][ T1111] loop1: detected capacity change from 0 to 264192
[ 1554.321495][ T1108] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1554.334083][ T1111] EXT4-fs (loop1): Invalid log cluster size: 4608
[ 1554.344466][ T1121] loop3: detected capacity change from 0 to 264192
04:27:48 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000031e090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xc105}, 0x0)

04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010a01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20001020090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000140000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1554.345733][ T1122] loop2: detected capacity change from 0 to 264192
[ 1554.351482][T23865]  loop2: unable to read partition table
[ 1554.383993][ T1121] EXT4-fs (loop3): inodes count not valid: 537067552 vs 32
[ 1554.393567][ T1122] EXT4-fs (loop2): Invalid log block size: 55443456
04:27:48 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

[ 1554.439042][ T1131] loop4: detected capacity change from 0 to 140
[ 1554.448764][ T1135] loop3: detected capacity change from 0 to 264192
[ 1554.449984][T23865]  loop3: unable to read partition table
[ 1554.469619][ T1137] loop1: detected capacity change from 0 to 264192
04:27:48 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000b60300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x34000}, 0x0)

[ 1554.483595][ T1131] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:48 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x400300}, 0x0)

04:27:48 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010b01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1554.516383][ T1137] EXT4-fs (loop1): Invalid log cluster size: 5120
[ 1554.535399][ T1135] EXT4-fs (loop3): inodes count not valid: 537919520 vs 32
[ 1554.547272][ T1140] loop2: detected capacity change from 0 to 264192
04:27:48 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000180000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:48 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000121090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1554.572484][ T1150] loop4: detected capacity change from 0 to 140
[ 1554.579208][ T1140] EXT4-fs (loop2): Invalid log block size: 62259200
[ 1554.606098][ T1150] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000be0300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0))

04:27:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x1000000}, 0x0)

[ 1554.633551][ T1152] loop3: detected capacity change from 0 to 264192
[ 1554.636490][ T1154] loop1: detected capacity change from 0 to 264192
[ 1554.644544][ T1437]  loop1: unable to read partition table
[ 1554.664023][ T1157] loop2: detected capacity change from 0 to 264192
04:27:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x2000000}, 0x0)

04:27:49 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))

04:27:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000321090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010c01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000001b0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1554.687045][ T1152] EXT4-fs (loop3): inodes count not valid: 553713696 vs 32
[ 1554.704046][ T1154] EXT4-fs (loop1): Invalid log cluster size: 6144
[ 1554.721982][ T1157] EXT4-fs (loop2): Invalid log block size: 62783488
04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000ce0300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34060}]}}]}, 0x3c}}, 0x0)

[ 1554.773720][ T1169] loop3: detected capacity change from 0 to 264192
[ 1554.791857][ T1171] loop1: detected capacity change from 0 to 264192
[ 1554.803732][ T1174] loop4: detected capacity change from 0 to 140
[ 1554.806094][ T1176] loop2: detected capacity change from 0 to 264192
[ 1554.820939][ T1169] EXT4-fs (loop3): inodes count not valid: 553844768 vs 32
[ 1554.829116][ T1176] EXT4-fs (loop2): Invalid log block size: 63832064
[ 1554.848874][T22835] ==================================================================
[ 1554.856946][T22835] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize
[ 1554.864308][T22835] 
[ 1554.866617][T22835] write to 0xffff8881023d3a9e of 1 bytes by task 1171 on cpu 0:
[ 1554.874332][T22835]  set_blocksize+0x20a/0x270
[ 1554.878914][T22835]  sb_min_blocksize+0x92/0x110
[ 1554.883682][T22835]  ext4_fill_super+0x3b7/0x5010
[ 1554.888535][T22835]  get_tree_bdev+0x2b4/0x3b0
[ 1554.893119][T22835]  ext4_get_tree+0x18/0x20
[ 1554.897524][T22835]  vfs_get_tree+0x49/0x190
[ 1554.901944][T22835]  do_new_mount+0x200/0x650
[ 1554.906435][T22835]  path_mount+0x4ad/0xbb0
[ 1554.910763][T22835]  __se_sys_mount+0x281/0x2d0
[ 1554.915428][T22835]  __x64_sys_mount+0x63/0x70
[ 1554.920007][T22835]  do_syscall_64+0x2b/0x70
[ 1554.924415][T22835]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1554.930300][T22835] 
[ 1554.932609][T22835] read to 0xffff8881023d3a9e of 1 bytes by task 22835 on cpu 1:
[ 1554.940220][T22835]  do_mpage_readpage+0x6c/0xcf0
[ 1554.945057][T22835]  mpage_readahead+0x27f/0x3a0
[ 1554.949808][T22835]  blkdev_readahead+0x18/0x20
[ 1554.954488][T22835]  read_pages+0xa5/0x790
[ 1554.958716][T22835]  page_cache_ra_unbounded+0x2a8/0x2e0
[ 1554.964164][T22835]  force_page_cache_ra+0x1c6/0x200
[ 1554.969263][T22835]  page_cache_sync_ra+0xc8/0xf0
[ 1554.974098][T22835]  filemap_read+0x3ef/0x1430
[ 1554.978697][T22835]  blkdev_read_iter+0x2c6/0x370
[ 1554.983533][T22835]  vfs_read+0x3a5/0x560
[ 1554.987672][T22835]  ksys_read+0xe8/0x1a0
[ 1554.991813][T22835]  __x64_sys_read+0x3e/0x50
[ 1554.996322][T22835]  do_syscall_64+0x2b/0x70
[ 1555.000724][T22835]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1555.006625][T22835] 
[ 1555.008935][T22835] value changed: 0x0c -> 0x0a
[ 1555.013607][T22835] 
[ 1555.015916][T22835] Reported by Kernel Concurrency Sanitizer on:
04:27:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000022090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.022054][T22835] CPU: 1 PID: 22835 Comm: udevd Not tainted 6.0.0-rc2-syzkaller-00327-g8379c0b31fbc-dirty #0
[ 1555.032189][T22835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 1555.042242][T22835] ==================================================================
[ 1555.065171][ T1174] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000322090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000f80300000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x3000000}, 0x0)

[ 1555.070429][ T1171] EXT4-fs (loop1): Invalid log cluster size: 6912
[ 1555.115206][ T1184] loop3: detected capacity change from 0 to 264192
[ 1555.122018][ T1183] __nla_validate_parse: 31 callbacks suppressed
[ 1555.122030][ T1183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1555.136080][ T1186] loop2: detected capacity change from 0 to 264192
04:27:49 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000220000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:49 executing program 0:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000001b0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000020400000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010d01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.174194][ T1184] EXT4-fs (loop3): inodes count not valid: 570621984 vs 32
[ 1555.175597][ T1186] EXT4-fs (loop2): Invalid log block size: 66584576
04:27:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x4000000}, 0x0)

04:27:49 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1555.236957][ T1193] loop4: detected capacity change from 0 to 140
[ 1555.237981][ T1192] loop1: detected capacity change from 0 to 264192
[ 1555.245504][ T1193] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1555.259302][ T1195] loop2: detected capacity change from 0 to 264192
[ 1555.262024][T23865]  loop2: unable to read partition table
[ 1555.270513][ T1192] EXT4-fs (loop1): Invalid log cluster size: 8704
04:27:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000025090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000060400000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010e01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.288756][ T1195] EXT4-fs (loop2): Invalid log block size: 67239936
[ 1555.288876][ T1197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1555.314341][ T1199] loop3: detected capacity change from 0 to 264192
04:27:49 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

04:27:49 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000250000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x5000000}, 0x0)

04:27:49 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000125090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000100400000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.345382][ T1205] loop2: detected capacity change from 0 to 264192
[ 1555.352465][ T1199] EXT4-fs (loop3): inodes count not valid: 620757024 vs 32
[ 1555.374239][ T1207] loop4: detected capacity change from 0 to 140
[ 1555.385899][ T1205] EXT4-fs (loop2): Invalid log block size: 67502080
04:27:49 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0))

[ 1555.418957][ T1207] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1555.421233][ T1211] loop1: detected capacity change from 0 to 264192
[ 1555.430388][ T1213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1555.456209][ T1215] loop2: detected capacity change from 0 to 264192
04:27:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x6000000}, 0x0)

04:27:49 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010f01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.473869][ T1211] EXT4-fs (loop1): Invalid log cluster size: 9472
[ 1555.495792][ T1215] EXT4-fs (loop2): Invalid log block size: 68157440
[ 1555.517717][ T1221] loop4: detected capacity change from 0 to 140
04:27:49 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000500000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.524961][ T1222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1555.540657][ T1221] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1555.546183][ T1227] loop3: detected capacity change from 0 to 264192
[ 1555.560161][ T1229] loop2: detected capacity change from 0 to 264192
04:27:49 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000260000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:49 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:49 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef011001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:49 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000600000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.572063][ T1227] EXT4-fs (loop3): inodes count not valid: 620822560 vs 32
[ 1555.584674][ T1229] EXT4-fs (loop2): Invalid log block size: 83886080
[ 1555.596703][ T1233] loop1: detected capacity change from 0 to 264192
04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000026090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.625617][ T1233] EXT4-fs (loop1): Invalid log cluster size: 9728
[ 1555.655376][ T1240] loop3: detected capacity change from 0 to 264192
[ 1555.663348][ T1242] loop2: detected capacity change from 0 to 264192
[ 1555.663359][ T1241] loop4: detected capacity change from 0 to 140
04:27:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x7000000}, 0x0)

04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000320000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:50 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef011101000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.685843][ T1241] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1555.687838][ T1242] EXT4-fs (loop2): Invalid log block size: 100663296
[ 1555.698879][ T1244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1555.721598][ T1240] EXT4-fs (loop3): inodes count not valid: 637534240 vs 32
04:27:50 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000040600000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1555.767595][ T1249] loop1: detected capacity change from 0 to 264192
[ 1555.772189][ T1251] loop4: detected capacity change from 0 to 140
[ 1555.796304][ T1251] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='inode_foreign_history\x00', r2}, 0x10)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000030090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x8000000}, 0x0)

04:27:50 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000003e0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:50 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef011201000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x2, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1555.814131][ T1249] EXT4-fs (loop1): Invalid log cluster size: 12800
[ 1555.835982][ T1257] loop2: detected capacity change from 0 to 264192
[ 1555.837215][ T1256] loop3: detected capacity change from 0 to 264192
[ 1555.851192][ T1257] EXT4-fs (loop2): Invalid log block size: 100925440
[ 1555.883335][ T1256] EXT4-fs (loop3): inodes count not valid: 805306400 vs 32
[ 1555.890534][ T1262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1555.898894][ T1264] loop1: detected capacity change from 0 to 264192
[ 1555.901722][T22835] blk_print_req_error: 26 callbacks suppressed
[ 1555.901790][T22835] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1555.921673][T22835] buffer_io_error: 23 callbacks suppressed
04:27:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x9000000}, 0x0)

04:27:50 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000700000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000460000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1555.921682][T22835] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1555.943620][ T1265] loop4: detected capacity change from 0 to 140
[ 1555.952916][ T1264] EXT4-fs (loop1): Invalid log cluster size: 15872
04:27:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000032090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
pipe(&(0x7f0000000e80))
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1555.989933][ T1269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1556.006888][ T1274] loop3: detected capacity change from 0 to 264192
[ 1556.017980][ T1275] loop1: detected capacity change from 0 to 264192
[ 1556.024760][ T1265] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000480000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef011401000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000003e090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000900000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1556.025362][ T1271] loop2: detected capacity change from 0 to 264192
[ 1556.045739][ T1274] EXT4-fs (loop3): inodes count not valid: 838860832 vs 32
[ 1556.058128][ T1275] EXT4-fs (loop1): Invalid log cluster size: 17920
[ 1556.066057][ T1271] EXT4-fs (loop2): Invalid log block size: 117440512
04:27:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xa000000}, 0x0)

[ 1556.120634][ T1286] loop4: detected capacity change from 0 to 140
[ 1556.128619][ T1287] loop1: detected capacity change from 0 to 264192
[ 1556.140073][ T1290] loop3: detected capacity change from 0 to 264192
[ 1556.144748][ T1293] loop2: detected capacity change from 0 to 264192
[ 1556.152857][ T1437] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1556.162304][ T1437] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1556.172349][ T1286] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1556.182589][ T1290] EXT4-fs (loop3): inodes count not valid: 1040187424 vs 32
[ 1556.184279][ T1287] EXT4-fs (loop1): Invalid log cluster size: 18432
[ 1556.200857][ T1295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1556.210315][ T1293] EXT4-fs (loop2): Invalid log block size: 150994944
04:27:50 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef012201000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000a00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000003f090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1556.220289][T23865] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1556.229454][T23865] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1556.251096][T22837] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1556.264826][ T1297] loop4: detected capacity change from 0 to 140
04:27:50 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000004c0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1556.284461][ T1303] loop2: detected capacity change from 0 to 264192
[ 1556.291263][T24855] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1556.302682][ T1303] EXT4-fs (loop2): Invalid log block size: 167772160
[ 1556.310080][ T1297] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1556.320440][ T1305] loop3: detected capacity change from 0 to 264192
04:27:50 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000010a00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xb000000}, 0x0)

[ 1556.327167][T22837] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1556.336394][T22837] Buffer I/O error on dev loop3, logical block 0, async page read
04:27:50 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef012501000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1556.377439][ T1313] loop1: detected capacity change from 0 to 264192
[ 1556.393558][ T1316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1556.410386][ T1305] EXT4-fs (loop3): inodes count not valid: 1056964640 vs 32
[ 1556.413954][ T1313] EXT4-fs (loop1): Invalid log cluster size: 19456
[ 1556.422728][ T1319] loop2: detected capacity change from 0 to 264192
04:27:50 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000510000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:50 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000b00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1556.448272][ T1319] EXT4-fs (loop2): Invalid log block size: 167837696
[ 1556.450148][ T1321] loop4: detected capacity change from 0 to 140
[ 1556.478876][ T1321] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1556.484256][ T1326] loop1: detected capacity change from 0 to 264192
04:27:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xc000000}, 0x0)

04:27:50 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000040090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef012601000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1556.521746][ T1326] EXT4-fs (loop1): Invalid log cluster size: 20736
[ 1556.523577][ T1330] loop2: detected capacity change from 0 to 264192
04:27:50 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1556.566375][ T1330] EXT4-fs (loop2): Invalid log block size: 184549376
[ 1556.571385][ T1334] loop4: detected capacity change from 0 to 140
[ 1556.577446][ T1335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1556.600891][ T1344] loop3: detected capacity change from 0 to 264192
04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000550000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000c00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1556.611761][ T1344] EXT4-fs (loop3): inodes count not valid: 1073741856 vs 32
[ 1556.612324][ T1334] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xf000000}, 0x0)

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000140090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef014601000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1556.658797][ T1353] loop1: detected capacity change from 0 to 264192
[ 1556.665593][ T1350] loop2: detected capacity change from 0 to 264192
[ 1556.674412][ T1353] EXT4-fs (loop1): Invalid log cluster size: 21760
[ 1556.691919][ T1350] EXT4-fs (loop2): Invalid log block size: 201326592
04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x10000000}, 0x0)

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000d00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000600000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1556.729333][ T1360] loop3: detected capacity change from 0 to 264192
[ 1556.762376][ T1365] loop4: detected capacity change from 0 to 140
[ 1556.769064][ T1360] EXT4-fs (loop3): inodes count not valid: 1073807392 vs 32
[ 1556.771257][ T1368] loop2: detected capacity change from 0 to 264192
[ 1556.778646][ T1369] loop1: detected capacity change from 0 to 264192
[ 1556.788290][ T1437] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1556.798602][ T1437] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1556.806544][ T1365] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1556.816186][ T1368] EXT4-fs (loop2): Invalid log block size: 218103808
[ 1556.823470][ T1369] EXT4-fs (loop1): Invalid log cluster size: 24576
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000241090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef014801000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x11000000}, 0x0)

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000680000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000e00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1556.855192][ T1374] loop3: detected capacity change from 0 to 264192
[ 1556.870238][T23865] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1556.887402][ T1374] EXT4-fs (loop3): inodes count not valid: 1090650144 vs 32
[ 1556.902649][ T1380] loop1: detected capacity change from 0 to 264192
[ 1556.906585][T23865] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1556.911889][ T1383] loop4: detected capacity change from 0 to 140
[ 1556.918795][T23865] Buffer I/O error on dev loop1, logical block 132032, async page read
[ 1556.938557][ T1380] EXT4-fs (loop1): Invalid log cluster size: 26624
[ 1556.947299][ T1385] loop2: detected capacity change from 0 to 264192
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000341090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x60000000}, 0x0)

[ 1556.950301][ T1383] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1556.971509][ T1388] loop3: detected capacity change from 0 to 264192
[ 1556.973917][ T1385] EXT4-fs (loop2): Invalid log block size: 234881024
[ 1556.984934][ T1388] EXT4-fs (loop3): inodes count not valid: 1090715680 vs 32
[ 1556.995039][T23865] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000006c0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000245090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000000f00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1557.004753][T23865] Buffer I/O error on dev loop1, logical block 132032, async page read
[ 1557.031462][ T1395] loop1: detected capacity change from 0 to 264192
04:27:51 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef014c01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1557.065989][ T1398] loop3: detected capacity change from 0 to 264192
[ 1557.073720][ T1398] EXT4-fs (loop3): inodes count not valid: 1157759008 vs 32
[ 1557.075398][ T1395] EXT4-fs (loop1): Invalid log cluster size: 27648
[ 1557.091132][ T1404] loop2: detected capacity change from 0 to 264192
04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x65580000}, 0x0)

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000046090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000740000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1557.117395][ T1407] loop4: detected capacity change from 0 to 140
[ 1557.120803][ T1404] EXT4-fs (loop2): Invalid log block size: 251658240
[ 1557.132340][ T1407] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000041000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1557.175767][ T1416] loop3: detected capacity change from 0 to 264192
[ 1557.176131][T23865] Buffer I/O error on dev loop3, logical block 0, async page read
[ 1557.209172][ T1424] loop1: detected capacity change from 0 to 264192
04:27:51 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef015501000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000007a0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1557.242085][ T1424] EXT4-fs (loop1): Invalid log cluster size: 29696
[ 1557.250488][ T1428] loop2: detected capacity change from 0 to 264192
[ 1557.261981][ T1416] EXT4-fs (loop3): inodes count not valid: 1174405152 vs 32
[ 1557.269586][ T1428] EXT4-fs (loop2): Invalid log block size: 268697600
[ 1557.272722][ T1431] loop4: detected capacity change from 0 to 140
04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x81000000}, 0x0)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000048090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000201000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1557.297900][ T1431] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1557.336411][ T1443] loop1: detected capacity change from 0 to 264192
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef016001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000007c0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000001100000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.338933][ T1442] loop2: detected capacity change from 0 to 264192
[ 1557.349671][ T1443] EXT4-fs (loop1): Invalid log cluster size: 31232
[ 1557.350108][ T1444] loop3: detected capacity change from 0 to 264192
[ 1557.358475][ T1442] EXT4-fs (loop2): Invalid log block size: 270532608
[ 1557.373071][ T1444] EXT4-fs (loop3): inodes count not valid: 1207959584 vs 32
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x81ffffff}, 0x0)

04:27:51 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000349090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.426753][ T1454] loop1: detected capacity change from 0 to 264192
[ 1557.429469][ T1453] loop4: detected capacity change from 0 to 140
[ 1557.465947][ T1453] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1557.477065][ T1461] loop2: detected capacity change from 0 to 264192
[ 1557.490089][ T1463] loop3: detected capacity change from 0 to 264192
[ 1557.498885][ T1454] EXT4-fs (loop1): Invalid log cluster size: 31744
04:27:51 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000900000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1557.522633][ T1463] EXT4-fs (loop3): inodes count not valid: 1224933408 vs 32
04:27:51 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef016801000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x88470000}, 0x0)

04:27:51 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000ca0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:51 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000001200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.555639][ T1461] EXT4-fs (loop2): Invalid log block size: 285212672
[ 1557.585741][ T1469] loop4: detected capacity change from 0 to 140
04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000024a090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1557.652444][ T1482] loop1: detected capacity change from 0 to 264192
[ 1557.657457][T22835] Buffer I/O error on dev loop1, logical block 0, async page read
[ 1557.659345][ T1469] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1557.675055][ T1485] loop3: detected capacity change from 0 to 264192
[ 1557.684986][ T1487] loop2: detected capacity change from 0 to 264192
04:27:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x88480000}, 0x0)

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000dc0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000001400000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.696624][ T1487] EXT4-fs (loop2): Invalid log block size: 301989888
[ 1557.705433][ T1485] EXT4-fs (loop3): inodes count not valid: 1241645088 vs 32
[ 1557.705612][ T1482] EXT4-fs (loop1): Invalid log cluster size: 51712
04:27:52 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef016c01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000004c090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00"/16], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00"/16], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1557.792374][ T1497] loop2: detected capacity change from 0 to 264192
[ 1557.796144][T23865] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1557.810140][ T1502] loop3: detected capacity change from 0 to 264192
[ 1557.810752][T24855]  loop3: unable to read partition table
[ 1557.821017][ T1504] loop4: detected capacity change from 0 to 140
[ 1557.834103][ T1500] loop1: detected capacity change from 0 to 264192
04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a00"/16], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000051090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.851475][ T1502] EXT4-fs (loop3): inodes count not valid: 1275068448 vs 32
[ 1557.870582][ T1504] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1557.884432][ T1497] EXT4-fs (loop2): Invalid log block size: 335544320
04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000352090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.897318][ T1500] EXT4-fs (loop1): Invalid log cluster size: 56320
04:27:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x88a8ffff}, 0x0)

04:27:52 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000de0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:52 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef017401000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000001800000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1557.955503][ T1516] loop3: detected capacity change from 0 to 264192
[ 1557.970449][ T1520] loop4: detected capacity change from 0 to 140
[ 1557.977244][ T1521] loop1: detected capacity change from 0 to 264192
[ 1557.980011][ T1524] loop2: detected capacity change from 0 to 264192
[ 1557.985523][T22837]  loop2: unable to read partition table
04:27:52 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000ea0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1558.008348][ T1521] EXT4-fs (loop1): Invalid log cluster size: 56832
[ 1558.008833][ T1524] EXT4-fs (loop2): Invalid log block size: 402653184
[ 1558.034675][ T1520] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000001b00000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1558.061465][ T1516] EXT4-fs (loop3): inodes count not valid: 1375928352 vs 32
[ 1558.065113][ T1531] loop1: detected capacity change from 0 to 264192
[ 1558.073434][T23865]  loop1: unable to read partition table
[ 1558.101471][ T1531] EXT4-fs (loop1): Invalid log cluster size: 59904
04:27:52 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef017a01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000055090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1558.107788][ T1535] loop2: detected capacity change from 0 to 264192
[ 1558.112264][T22835]  loop2: unable to read partition table
04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0x9effffff}, 0x0)

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000fe0000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1558.152783][ T1539] loop3: detected capacity change from 0 to 264192
[ 1558.170065][ T1541] loop4: detected capacity change from 0 to 140
[ 1558.176825][ T1535] EXT4-fs (loop2): Invalid log block size: 452984832
04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000002000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000102000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000002200000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[ 1558.201648][ T1539] EXT4-fs (loop3): inodes count not valid: 1426063392 vs 32
[ 1558.209810][ T1548] loop1: detected capacity change from 0 to 264192
[ 1558.216455][ T1541] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
[ 1558.236250][ T1548] EXT4-fs (loop1): Invalid log cluster size: 65024
04:27:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xc1050000}, 0x0)

04:27:52 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef018401000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000015a090100000c001125ce0000000f000000010000000000000000000000000300000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000)

04:27:52 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f000000010000000000000000090100002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

[ 1558.276441][ T1559] loop2: detected capacity change from 0 to 264192
[ 1558.291537][ T1559] EXT4-fs (loop2): Invalid log block size: 570425344
04:27:52 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1558.325952][ T1562] loop4: detected capacity change from 0 to 140
[ 1558.333342][ T1567] loop1: detected capacity change from 0 to 264192
[ 1558.342421][ T1569] loop3: detected capacity change from 0 to 264192
[ 1558.343320][T22835]  loop3: unable to read partition table
[ 1558.359073][ T1562] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (70 blocks)
04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000002500000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1558.376187][ T1567] EXT4-fs (loop1): Invalid log cluster size: 67840
[ 1558.389928][ T1569] EXT4-fs (loop3): inodes count not valid: 1510015008 vs 32
[ 1558.405344][ T1576] loop2: detected capacity change from 0 to 264192
04:27:52 executing program 1:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c001125ce0000000f0000000100000000000000001c0100002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xee00, 0x0, 0x0)

04:27:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000060000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x34000}]}}]}, 0x3c}, 0x1, 0xd55673dd}, 0x0)

04:27:52 executing program 4:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20740000090100000c001125ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef018c01000000d7f4655f000000000100250001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

04:27:52 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000005f0a0000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4000)

[ 1558.423888][ T1576] EXT4-fs (loop2): Invalid log block size: 620756992
[ 1558.443007][ T1580] loop1: detected capacity change from 0 to 264192
[ 1558.464790][ T1584] loop4: detected capacity change from 0 to 140
[ 1558.465215][T23865]  loop4: unable to read partition table
04:27:52 executing program 2:
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604000000000002, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c001125ce0000000f000000010000000000002600000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f0000