463][T22797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:22:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xb00000000000000) 13:22:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x4801, 0x0) 13:22:01 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000c0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1135.408100][T22798] EXT4-fs (loop3): bad geometry: first data block 16715520 is beyond end of filesystem (1080) [ 1135.486099][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1135.497563][T22844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1135.553024][T22841] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1135.705131][T22853] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1135.715511][T22853] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1135.727163][T22853] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1135.738512][T22853] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:22:04 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x3, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xc00000000000000) 13:22:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x4801, 0x0) 13:22:04 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000fffff7ff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:04 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000d0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0045878, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0045878, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xf00000000000000) [ 1138.232439][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1138.246611][T22879] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1138.264190][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x4801, 0x0) 13:22:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0046686, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x1000000000000000) [ 1138.393360][T22907] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:04 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000e0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1138.498049][T22901] EXT4-fs (loop3): bad geometry: first data block 16775167 is beyond end of filesystem (1080) [ 1138.547782][T22923] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1138.565959][T22923] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1138.620006][T22926] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1138.727858][T22925] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1138.763141][T22925] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1138.783725][T22925] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1138.803761][T22925] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:22:07 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x3, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x1100000000000000) 13:22:07 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000fffffbff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x4801, 0x0) 13:22:07 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000100000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0205647, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x1200000000000000) [ 1141.264545][T22954] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.286716][T22954] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0205648, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1141.334315][T22958] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1141.366223][T22977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x1300000000000000) [ 1141.380899][T22977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x4801, 0x0) [ 1141.449848][T22953] EXT4-fs (loop3): bad geometry: first data block 16776191 is beyond end of filesystem (1080) 13:22:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0205649, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1141.502610][T22990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.568095][T22990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.582493][T22991] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 13:22:10 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x3, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000110000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc020660b, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x1400000000000000) 13:22:10 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000fff7ffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53", 0x39, 0x400}], 0x4801, 0x0) 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0285628, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x6000000000000000) [ 1144.315606][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1144.326732][T23031] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0285629, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:10 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x3, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x6558000000000000) [ 1144.400491][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1144.413954][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0405667, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1144.452257][T23029] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1144.465983][T23022] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x8000000000000000) [ 1144.513466][T23065] ptrace attach of "/root/syz-executor.0"[23063] was attempted by "/root/syz-executor.0"[23065] [ 1144.524715][T23022] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1144.535449][T23022] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1144.536466][T23048] EXT4-fs (loop3): bad geometry: first data block 16777207 is beyond end of filesystem (1080) [ 1144.567034][T23022] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:22:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53", 0x39, 0x400}], 0x4801, 0x0) 13:22:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000120000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x8100000000000000) 13:22:10 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000fffbffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:10 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x3, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0505609, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x8847000000000000) 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc050560f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1144.767442][T23085] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x8848000000000000) 13:22:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53", 0x39, 0x400}], 0x4801, 0x0) 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0505611, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x88a8ffff00000000) [ 1144.954070][T23104] EXT4-fs (loop3): bad geometry: first data block 16777211 is beyond end of filesystem (1080) [ 1144.962483][T23125] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1144.971348][T23099] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1144.989818][T23099] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1145.000286][T23099] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1145.047303][T23099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:22:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008054e6c8150000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x9effffff00000000) 13:22:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc050565d, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x4801, 0x0) [ 1145.194398][T23150] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1145.303174][T23158] EXT4-fs (loop2): invalid inodes per group: 3370538112 [ 1145.303174][T23158] 13:22:13 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:13 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000f9fdffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0585609, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:13 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xbd7346ed00000000) 13:22:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x4801, 0x0) 13:22:13 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000250000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc058560f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:13 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:13 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xefffffff00000000) [ 1147.821745][T23184] __nla_validate_parse: 14 callbacks suppressed [ 1147.821751][T23184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1147.828114][T23183] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 13:22:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x4801, 0x0) 13:22:13 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0585611, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:13 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xf0ffffff00000000) [ 1148.019062][T23214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.052863][T23214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.092538][T23202] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.109700][T23222] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1148.114927][T23232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.136153][T23202] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:22:14 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00007fffffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc058565d, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:14 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:14 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000003f0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xffffff7f00000000) 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x3, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1148.228004][T23202] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1148.267658][T23202] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:22:14 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0xffffffff00000000) 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x4, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1148.318074][T23249] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1148.319500][T23256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.336769][T23256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1148.401418][T23243] EXT4-fs (loop3): bad geometry: first data block 16777215 is beyond end of filesystem (1080) 13:22:14 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) [ 1148.461778][T23273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.479268][T23273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.492496][T23278] EXT4-fs (loop1): Invalid log cluster size: 1280 13:22:14 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00008cffffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x5, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:14 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000000)={0x0, @data}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1148.666474][T23293] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.702111][T23293] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1148.719063][T23293] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1148.727814][T23308] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.741412][T23293] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1148.744547][T23316] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.788450][T23307] EXT4-fs (loop3): bad geometry: first data block 16777215 is beyond end of filesystem (1080) 13:22:14 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008015c8e6540000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x6, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x803, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)=']&keyring.proceth0wlan1\xc8wlan0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x7fff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000025c0)=ANY=[@ANYBLOB="38000000100005105978a5af10314a5e000000009ff5c3b9e093075be9ba8fad4fd889d4310f44518f78815238ccee0408f6cfb278a7649b0e06ef8c0ff9c2f78d70bd24d86386a5fbadff176fdc55d39f28ad6f02486f16735f119aaaf2443339994b9467307056efacd2d18980641cb8aaa66120dae81282fb971d0ce2318a141a56e34c93a0dd3ab15eb8496dd4a6", @ANYBLOB="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", @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES64], 0x38}}, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:14 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000ebffffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x8, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1148.944687][T23331] EXT4-fs (loop1): Invalid log cluster size: 1280 13:22:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0xfffffff, 0xffffffff, 0xfff, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0940, 0x10001, [], @value64=0x6}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x68, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000140021f90000000000ff00000a000000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) 13:22:14 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000fffffffe000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000140021010000000000009200000a0000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400032041400210100000000000000000a05004a33ff740775693f1d87a79b6aa5b26e577fa04c34a93c9a90f2c0bdd280ad82993e20ef06008b7f92f0e4bb3bff2657fdb8052ba884a4226db815d12be1b551a5ab53519f5d112f05", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) [ 1149.095616][T23345] EXT4-fs (loop2): invalid inodes per group: 3871872384 [ 1149.095616][T23345] [ 1149.174286][T23360] EXT4-fs (loop3): bad geometry: first data block 16777215 is beyond end of filesystem (1080) [ 1149.234086][T23376] EXT4-fs (loop1): bad geometry: first data block 16711679 is beyond end of filesystem (1080) 13:22:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r8, @ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:17 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:17 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000005c0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:17 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000f6ffffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:17 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x10, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1151.692871][T23404] FAULT_INJECTION: forcing a failure. [ 1151.692871][T23404] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.713893][T23404] CPU: 1 PID: 23404 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1151.722598][T23404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.732652][T23404] Call Trace: [ 1151.736030][T23404] dump_stack+0x1e9/0x30e 13:22:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c00300001300100026bd7000fedbdf2507000000eec539aed99d8574c831e667aa9fe1a2485c90ed1b92ad929cb7c71285ad5e04cf3eeb85d80849791d65ecab26dceef86a4ed6fe0d35a4c9352d88bac98885d877a8f298a16d17f027a0513f72e6e44ad23c88640007e7707b26adcfc78d24fd9523c22a7cc376fc0e4ffed37e0da8efa4d9acd05aeedc39d0e539d306b4aa3603d2630c2a143b7f5eac966f1d0d17fd38981330243f0e65d4e815fb282ea32c1ba6503211c2b71481ad104efe099d0b252868fffa93709ae61a3625", @ANYRES32=0x0, @ANYBLOB="0004020002020700380316808400018014000a00000000000000000000040000000000000c000700800000000500000010000200f9d00000de010000030000000c00070005000000020000000c00030008000000030000000c00040001000000290e00000c00050008000000030000000c000900020000000500000014000b00010000000000000006000000000000006400018014000a00ffffff7f0000000000000000801700000c000700ff010000020000000c000400ad040000810000000c00070005000000000000000c000900f7ffffff77da000010000600ffffffffa0000000010001000c0009000900000002000000580001800c000900040000000300000014000b00be0b000000000000ff0f00000000000014000b005cc30000000000003f000000000000000c00050003000000ffffff7f14000b0000000000000000000100000000000000380001802800010007000000bbbbbbbbbbbb00000000000000000000000000000000000000000000000000000c0005008f91ac0f00000000e40001800c0004005d020000080000007c000c801400010001000080380000000000000088a8000014000100050000007e010000c109000088a800001400010006000000a90f00000000008088a8000014000100030000003b05000001000000810000001400010004000000000100000800000099f800001400010002000000eb0500000200000088a800001000060001040000000000000100000010000200ff0f00001c0e0000420000002c000c8014000100010001006d0b00000900000088a8000014000100070000004607000001000100810000000c0003000200000001000100ac0001800c000900050000007f00000014000b000100008000000000ff000000000000000c0004003ad00000070000007c000c801400010023dfffffc9080000070000008100000014000100c2000000760a000002000000810000001400010065c6e679a70c00000600000088a8000014000100040000007f0100000100000088a800001400010000010000510b0000ff00000081000000140001006b0000002d0400000180000088a800001c0001800c00090007000000bd7d00000c0009000000000006000000100001800c00090002000000020000000a000100aaaaaaaaaabb0000140014006873723000000000000000000000000008002e00040000000800200002000000050021006a0000000400168008000d000200000014002400f90662193f82d9b3a7d8bf1f6365457a1000240076cdad0b0eb8a5ea9fc6d112"], 0x3c0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r9 = dup2(0xffffffffffffffff, r4) ioctl$HIDIOCGREPORTINFO(r9, 0xc00c4809, &(0x7f0000000000)={0x3, 0x1, 0x200}) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400001040000000000000000000000000a000000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000200ffffac141400140d010000000000000000000000ffffac1414aa25f53d278df9c5691e320ca0ff342ff895cc86c2ef7ed6ef6aadcf3e29b5ba5b428e13b3732bd249f3c7abf4c20d8c5605298478d46934295dc80fe680f5"], 0x40}}, 0x0) [ 1151.740376][T23404] should_fail+0x433/0x5b0 [ 1151.744834][T23404] ? __se_sys_memfd_create+0xfb/0x490 [ 1151.750220][T23404] should_failslab+0x5/0x20 [ 1151.754732][T23404] __kmalloc+0x74/0x330 [ 1151.758913][T23404] ? strnlen_user+0x206/0x2c0 [ 1151.763722][T23404] __se_sys_memfd_create+0xfb/0x490 [ 1151.768926][T23404] ? do_syscall_64+0x19/0x1b0 [ 1151.773609][T23404] do_syscall_64+0xf3/0x1b0 [ 1151.778114][T23404] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1151.784178][T23404] RIP: 0033:0x45ca29 [ 1151.788073][T23404] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1151.808296][T23404] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1151.816955][T23404] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1151.825193][T23404] RDX: 0000000020010288 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1151.833398][T23404] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 13:22:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x870, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:22:17 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1151.841357][T23404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1151.849553][T23404] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) [ 1151.930720][T23430] FAULT_INJECTION: forcing a failure. [ 1151.930720][T23430] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.955984][T23430] CPU: 1 PID: 23430 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1151.965107][T23430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.975266][T23430] Call Trace: [ 1151.978660][T23430] dump_stack+0x1e9/0x30e [ 1151.982998][T23430] should_fail+0x433/0x5b0 [ 1151.987647][T23430] ? shmem_alloc_inode+0x17/0x40 [ 1151.992600][T23430] should_failslab+0x5/0x20 [ 1151.997221][T23430] kmem_cache_alloc+0x53/0x2d0 [ 1152.002280][T23430] ? shmem_match+0x150/0x150 [ 1152.007025][T23430] shmem_alloc_inode+0x17/0x40 [ 1152.011927][T23430] ? shmem_match+0x150/0x150 [ 1152.016527][T23430] new_inode_pseudo+0x64/0x240 [ 1152.021304][T23430] new_inode+0x25/0x1d0 [ 1152.025497][T23430] shmem_get_inode+0x10e/0x6f0 [ 1152.030270][T23430] ? _raw_spin_unlock+0x24/0x40 [ 1152.035133][T23430] __shmem_file_setup+0x11e/0x270 [ 1152.040253][T23430] __se_sys_memfd_create+0x25e/0x490 [ 1152.045550][T23430] ? do_syscall_64+0x19/0x1b0 [ 1152.050533][T23430] do_syscall_64+0xf3/0x1b0 [ 1152.055156][T23430] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1152.061144][T23430] RIP: 0033:0x45ca29 [ 1152.065042][T23430] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1152.086033][T23430] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1152.094763][T23430] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1152.103275][T23430] RDX: 0000000020010288 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1152.111427][T23430] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1152.119973][T23430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 13:22:18 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000f0ff7f0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1152.128407][T23430] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x2, 0x0, {0x8, 0x1000, 0x544}}) [ 1152.312237][T23448] EXT4-fs (loop2): invalid inodes per group: 4293918848 [ 1152.312237][T23448] 13:22:20 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:20 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000fbffffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:20 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x3, 0x0, {0x8, 0x1000, 0x544}}) 13:22:20 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:20 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080fffffdef0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002ffff0100ffac1414470c7a850001000000000000000000ffffac1414aa008d5859ec2c41d87b63fd643f8793b582491e918c966e2cc84f1a3dca747a5af47c0247fd9db2eaab321fe4fe60a6b0f202675a57b50e5209b10000000000000000"], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="547da245505e1244e8a3dc20e34ddf061452b1a829787e99737e891d34e8fe00b92083d44284d1a99f9840000000869fa96593a2ce4767c35d06fd770db195"], 0x28}}, 0x200040c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000014003001000000", @ANYRES32=r3, @ANYBLOB="ac1414001400010000000000000100000000ffffac1414aa14f2b8b8a5f2dd3a13fc4e614f51986adeae5204411e7cedcfbed98c33bff5036dfe021fdf82f41d090c1feba7"], 0x40}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x400000000000000, 0xffffffff9d38edae}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={r5, 0x100, 0xfff}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={r6, 0x3}, 0x8) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000014002101ffffffff000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000200ffffac14140014000100f7983cb07ee2457949a0d9b1ff01000000000000000000000000000114000200fe800000000000000000000000000033"], 0x54}}, 0x0) [ 1154.724347][T23474] FAULT_INJECTION: forcing a failure. [ 1154.724347][T23474] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.738744][T23474] CPU: 0 PID: 23474 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1154.747516][T23476] __nla_validate_parse: 2 callbacks suppressed [ 1154.749797][T23476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1154.754118][T23474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.754122][T23474] Call Trace: [ 1154.754142][T23474] dump_stack+0x1e9/0x30e [ 1154.754153][T23474] should_fail+0x433/0x5b0 [ 1154.754170][T23474] ? security_inode_alloc+0x32/0x1e0 [ 1154.783600][T23476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1154.786098][T23474] should_failslab+0x5/0x20 [ 1154.786111][T23474] kmem_cache_alloc+0x53/0x2d0 [ 1154.786120][T23474] ? shmem_alloc_inode+0x17/0x40 [ 1154.786136][T23474] security_inode_alloc+0x32/0x1e0 13:22:20 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x4, 0x0, {0x8, 0x1000, 0x544}}) 13:22:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x1410, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r7, 0x2b, &(0x7f0000000040)="ccfb2b7af633e719542117354edc04fc181337df85d9203d8ca76e1c8cb1aa671fe6afc5f44cb1504c7244315c7597fcdafe281d98edd38f348b199c51a8ca2ab852fa127aa6054ed1d1c92d34bc20345e54e100553dd052690d5a128a9bc7cdef9d7cbe8a3f7465f93f10b62a696a50caeaf354a3cdbe57335186bdacf664da3475f2fa796b6fb01afd06a14ea026f997817cff4ac1c3bb47ae73a39cc4d0933ac67e71790012cfd832b8fa1064d1fd3a4c643d207c4049128bdd252badddec39b78da62377606ee46087b8fa443cc2629e8c431a44dc2f9b6d412d787e1bd8") ioctl$CAPI_GET_FLAGS(r6, 0x80044323, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1154.796442][T23476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1154.800678][T23474] inode_init_always+0x3f4/0xa50 [ 1154.800688][T23474] ? shmem_match+0x150/0x150 [ 1154.800697][T23474] new_inode_pseudo+0x7b/0x240 [ 1154.800706][T23474] new_inode+0x25/0x1d0 [ 1154.800716][T23474] shmem_get_inode+0x10e/0x6f0 [ 1154.800725][T23474] ? _raw_spin_unlock+0x24/0x40 [ 1154.800735][T23474] __shmem_file_setup+0x11e/0x270 [ 1154.800747][T23474] __se_sys_memfd_create+0x25e/0x490 [ 1154.800757][T23474] ? do_syscall_64+0x19/0x1b0 [ 1154.800777][T23474] do_syscall_64+0xf3/0x1b0 [ 1154.880465][T23474] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1154.886481][T23474] RIP: 0033:0x45ca29 [ 1154.890379][T23474] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1154.910217][T23474] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 13:22:20 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1154.918812][T23474] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1154.927192][T23474] RDX: 0000000020010288 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1154.935639][T23474] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1154.943769][T23474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1154.951927][T23474] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:20 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x5, 0x0, {0x8, 0x1000, 0x544}}) [ 1155.019446][T23495] FAULT_INJECTION: forcing a failure. [ 1155.019446][T23495] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.032414][T23496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1155.039109][T23495] CPU: 0 PID: 23495 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1155.050783][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:22:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4080, 0x0) ioctl$RTC_VL_CLR(r4, 0x7014) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="409dc2d93793475200d335654535dc04458ce4b2e3b1c327af826b17d885cc281c969f397f964811157bdc9dc5ebc2436d38fd76b8311f98e0843bf1d4758e362c7d93183a16089f47feaeb85f7eacc5b42e89bce07dbd43de5eac2e0da37aad36f30f39d24dafc0f816671493ff5e578df9a7d250d81f0a44036acebc3587a5cc0ce14623", @ANYRES32=r6, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1155.058268][T23496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1155.061298][T23495] Call Trace: [ 1155.061316][T23495] dump_stack+0x1e9/0x30e [ 1155.061327][T23495] should_fail+0x433/0x5b0 [ 1155.061340][T23495] ? __d_alloc+0x2a/0x6d0 [ 1155.061350][T23495] should_failslab+0x5/0x20 [ 1155.061360][T23495] kmem_cache_alloc+0x53/0x2d0 [ 1155.061369][T23495] __d_alloc+0x2a/0x6d0 [ 1155.061382][T23495] ? lockdep_init_map_waits+0x2e/0x770 [ 1155.107752][T23495] d_alloc_pseudo+0x19/0x70 [ 1155.112271][T23495] alloc_file_pseudo+0xc8/0x240 [ 1155.117749][T23495] __shmem_file_setup+0x194/0x270 [ 1155.122982][T23495] __se_sys_memfd_create+0x25e/0x490 [ 1155.128282][T23495] ? do_syscall_64+0x19/0x1b0 [ 1155.132981][T23495] do_syscall_64+0xf3/0x1b0 [ 1155.137498][T23495] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1155.143396][T23495] RIP: 0033:0x45ca29 [ 1155.147301][T23495] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:22:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x6, 0x0, {0x8, 0x1000, 0x544}}) [ 1155.167353][T23495] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1155.176203][T23495] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1155.184184][T23495] RDX: 0000000020010288 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1155.192476][T23495] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1155.200607][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1155.209166][T23495] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:23 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000000)=0x7fffffff) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:23 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:23 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000feffffff000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x7, 0x0, {0x8, 0x1000, 0x544}}) 13:22:23 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080fffffffe0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x8, 0x0, {0x8, 0x1000, 0x544}}) [ 1158.011067][T23529] FAULT_INJECTION: forcing a failure. [ 1158.011067][T23529] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.035696][T23530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.053835][T23529] CPU: 1 PID: 23529 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1158.062756][T23529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.072800][T23529] Call Trace: [ 1158.076282][T23529] dump_stack+0x1e9/0x30e [ 1158.080599][T23529] should_fail+0x433/0x5b0 [ 1158.085008][T23529] ? __alloc_file+0x26/0x390 [ 1158.089696][T23529] should_failslab+0x5/0x20 [ 1158.094192][T23529] kmem_cache_alloc+0x53/0x2d0 [ 1158.096888][T23546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsu\x00', 0x200001, 0x0) accept4$phonet_pipe(r7, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400210100000000be9fe298000000000a000000", @ANYRES32=r3, @ANYRES64=r4], 0x40}}, 0x8000) [ 1158.098958][T23529] __alloc_file+0x26/0x390 [ 1158.098967][T23529] ? alloc_empty_file+0x49/0x1b0 [ 1158.098975][T23529] alloc_empty_file+0xa9/0x1b0 [ 1158.098984][T23529] alloc_file+0x5d/0x4c0 [ 1158.098998][T23529] alloc_file_pseudo+0x1b0/0x240 [ 1158.131735][T23529] __shmem_file_setup+0x194/0x270 [ 1158.136798][T23529] __se_sys_memfd_create+0x25e/0x490 [ 1158.142087][T23529] ? do_syscall_64+0x19/0x1b0 [ 1158.146777][T23529] do_syscall_64+0xf3/0x1b0 [ 1158.151303][T23529] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1158.157175][T23529] RIP: 0033:0x45ca29 [ 1158.161044][T23529] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1158.180641][T23529] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1158.189053][T23529] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1158.197002][T23529] RDX: 0000000020010288 RSI: 0000000000000000 RDI: 00000000004c1b91 13:22:24 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1158.205089][T23529] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1158.213038][T23529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1158.220991][T23529] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1158.316934][T23557] FAULT_INJECTION: forcing a failure. [ 1158.316934][T23557] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.319428][T23558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.333774][T23557] CPU: 1 PID: 23557 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1158.347589][T23557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.350207][T23558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1158.358332][T23557] Call Trace: [ 1158.358350][T23557] dump_stack+0x1e9/0x30e [ 1158.358361][T23557] should_fail+0x433/0x5b0 [ 1158.358374][T23557] ? security_file_alloc+0x32/0x200 [ 1158.358381][T23557] should_failslab+0x5/0x20 [ 1158.358396][T23557] kmem_cache_alloc+0x53/0x2d0 [ 1158.394020][T23557] security_file_alloc+0x32/0x200 [ 1158.399035][T23557] __alloc_file+0xd7/0x390 [ 1158.403428][T23557] alloc_empty_file+0xa9/0x1b0 [ 1158.408181][T23557] alloc_file+0x5d/0x4c0 [ 1158.412397][T23557] alloc_file_pseudo+0x1b0/0x240 [ 1158.417311][T23557] __shmem_file_setup+0x194/0x270 [ 1158.422313][T23557] __se_sys_memfd_create+0x25e/0x490 [ 1158.427571][T23557] ? do_syscall_64+0x19/0x1b0 [ 1158.432221][T23557] do_syscall_64+0xf3/0x1b0 [ 1158.436715][T23557] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1158.442586][T23557] RIP: 0033:0x45ca29 [ 1158.446458][T23557] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:22:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x9, 0x0, {0x8, 0x1000, 0x544}}) 13:22:24 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080effdffff0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1158.466062][T23557] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1158.474447][T23557] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045ca29 [ 1158.482410][T23557] RDX: 0000000020010288 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1158.490354][T23557] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1158.498298][T23557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1158.506258][T23557] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:24 executing program 1 (fault-call:0 fault-nth:6): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1158.549472][T23548] EXT4-fs (loop3): bad geometry: first data block 16777215 is beyond end of filesystem (1080) [ 1158.643482][T23581] FAULT_INJECTION: forcing a failure. [ 1158.643482][T23581] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.656262][T23581] CPU: 1 PID: 23581 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1158.664937][T23581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.675132][T23581] Call Trace: [ 1158.678434][T23581] dump_stack+0x1e9/0x30e [ 1158.682756][T23581] should_fail+0x433/0x5b0 [ 1158.687525][T23581] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1158.693224][T23581] should_failslab+0x5/0x20 [ 1158.697706][T23581] __kmalloc+0x74/0x330 [ 1158.701874][T23581] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1158.707587][T23581] tomoyo_realpath_from_path+0xd8/0x630 [ 1158.714168][T23581] tomoyo_path_perm+0x17d/0x740 [ 1158.719001][T23581] ? trace_lock_release+0x137/0x1a0 [ 1158.724203][T23581] security_path_truncate+0xc0/0x140 [ 1158.729463][T23581] do_sys_ftruncate+0x443/0x690 [ 1158.736216][T23581] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1158.741911][T23581] ? entry_SYSCALL_64_after_hwframe+0x3e/0xb3 [ 1158.747968][T23581] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1158.753652][T23581] ? do_syscall_64+0x19/0x1b0 [ 1158.758317][T23581] do_syscall_64+0xf3/0x1b0 [ 1158.762845][T23581] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1158.768800][T23581] RIP: 0033:0x45c9f7 [ 1158.772677][T23581] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 3c e5 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1158.792277][T23581] RSP: 002b:00007fef90227a68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1158.800830][T23581] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c9f7 [ 1158.808803][T23581] RDX: 0000000020010288 RSI: 0000000000000800 RDI: 0000000000000004 [ 1158.816844][T23581] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1158.824944][T23581] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 1158.832985][T23581] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1158.843012][T23581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1158.922034][T23581] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1158.929529][T23584] EXT4-fs (loop2): invalid inodes per group: 4294832000 [ 1158.929529][T23584] 13:22:26 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xa, 0x0, {0x8, 0x1000, 0x544}}) 13:22:26 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00007b71090b3203d027120008100100736974000c00020005000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x80}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="1400020000000000100000000200ffffac14140014000100000000009337295717fde2929f00003f1a8764bd8398c2271cdf7cd6f20500000000ffffac1414aa"], 0x40}}, 0x0) 13:22:26 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000020000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:26 executing program 1 (fault-call:0 fault-nth:7): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:26 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080feffffff0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xb, 0x0, {0x8, 0x1000, 0x544}}) [ 1161.060080][T23614] FAULT_INJECTION: forcing a failure. [ 1161.060080][T23614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.073312][T23614] CPU: 0 PID: 23614 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1161.081979][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.092552][T23614] Call Trace: [ 1161.095847][T23614] dump_stack+0x1e9/0x30e [ 1161.096427][T23616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:26 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x4, 0x3}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)="1239874d2415e093ab148526cb1a3192de9cbbce97182debf94604d858d84be8857af3dcd7f3169ea1de1554f3dd8f5f90d006ed689c55c965e06d35b2ca0e6662fadba64dba8242e2d7dfcaf740879bf8ef46d7c0", 0x55}, {&(0x7f00000003c0)="4a5f741ca736ccfe7c10b7bb8cb0cf03b6176eb712d1d8a9153845785fbac6a985f0789c68f3d6928f1ff892e65e117a35b53a26eeef8d57f7de07efdcd4f8af32fb954ae37103b4e4388702373e512e1dceded576b6d0ac01f4bdd202b762557626dd6ef801ae58096172a547622c308affd3e76b511520dcdaf13b911ec4954e1a0e8b07f8344737a330ad5dac7571157d85166c5560564418ce42d2d556ff2c2b382ad23268316b0935d1777549b507341c7ed790803d7a2eba234c73989406d4f046899369acb69fdd05f4455fb724b80bcf723a1e062aee6f097ac96fc5c485fb4d53cd", 0xe6}, {&(0x7f00000004c0)="a62070af4374d87ddfc3ce5a3a2ec636fc798a2e7d3fbf03cfbf9a3a98e54d3ef0a503ce234289540582050f0d9ad3139a3ce578f4055a578784337dddd113b34cd0f90a195d32173ed5dffa78aaafd2c1374cc23c320beaaed20d860e993cf908568dba0ce2254d5b273d872df4efe7c82b5b9c10520e47dc723522a63c1a160c815ac31d8c526b", 0x88}, {&(0x7f0000000100)="cf3f12814bea", 0x6}, {&(0x7f0000000580)="53e6c08d616abb73cc1497049dfdf8a247e6de0804ad36bcb23d1809597961f3e237adf9ffbb09edc0457f70be798ab1cc88cb6c4ec6e107d0eb03d19e882215f479847e5e4594db3b103036a40fff6b097fc2d193213dd92052", 0x5a}], 0x5}}, {{&(0x7f0000000680)=@can={0x1d, r2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000700)="67d178ecf68a3d9099f575378cb2c920fc66e935793fcf16df38bd9b37374f189a904000bd499d9f0e10ebd488f68ab46c2bc3e9f9be3d1cfc0f3bcf58dddadd5bf6204e067614d88f92a6386cdc78100c3d61e4b939389560e3c212857387aa08df0caaae688506447f14e2ca78c94e0ea9922b3fdf1644aaf22c85c277cf74532c70ff9f83b80c6b140926b6948407fb4f51525b85e01489c71142e3ded1faa5d2a1", 0xa3}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8d47}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x80}}], 0xa8}}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1, 0x6}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)="f15cec0b27dfa01e309ecedcdf1e28350e688938814650acb6e011373bf381d303bd1691bb395c12e69822a070b684fc882ed2f36a4ab64460943ff1b8b60ee098d70b6fbae1961138a317bfc4cf801e1e18e162c6feb2827cb333f4db284f15fc62210ebe10f1dd4854572b34ba2f45d881c507042ae87b093861a2d654cec2d8cf150823399702450482e3a264b362345be882d043ad398633463107c787dc0f273f0a3b84fcad11c56b90abe91161d80e039d235490fa72bcde5017c3d84aa455a563d7913fdc3f76b9ca49d50e67453e1c14cc9a47e5afc0447402dcd6be9cae4dea7d", 0xe5}, {&(0x7f0000000a00)="f2545932ee0ef8d7fcd78354f5885499ce668c405b518cfef43674df1ef29e236b03b265ee0dba7efa88608a082082e8050fa7d28a15dada722771e3b2e33a32e464d911f345e04219822dd40b46ea289bb205706751bd55e78c00717c8d60abbee4139e374c924af1c80eaf7eba4d9f91fa74aae101a9a071b3697b56c640217e366a100958cbb6e7754e1899fba08ad2bd8be3ddfdda2cacc2b63e47d441c8b4c7d498da266c685319cfd352c1d9a51331d80bda2d19208df745e1410e60aa48c2", 0xc2}], 0x2, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x3, 0x400c080) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1161.100336][T23614] should_fail+0x433/0x5b0 [ 1161.100354][T23614] prepare_alloc_pages+0x28c/0x4a0 [ 1161.100366][T23614] __alloc_pages_nodemask+0xbc/0x5e0 [ 1161.100382][T23614] kmem_getpages+0x49/0x900 [ 1161.100393][T23614] cache_grow_begin+0x7b/0x2e0 [ 1161.100404][T23614] cache_alloc_refill+0x359/0x3f0 [ 1161.100414][T23614] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1161.100429][T23614] ? check_preemption_disabled+0xb0/0x240 [ 1161.111450][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1161.114104][T23614] ? debug_smp_processor_id+0x5/0x20 [ 1161.114118][T23614] __kmalloc+0x30c/0x330 [ 1161.114135][T23614] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1161.127946][T23616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1161.129076][T23614] tomoyo_realpath_from_path+0xd8/0x630 [ 1161.129090][T23614] tomoyo_path_perm+0x17d/0x740 [ 1161.129101][T23614] ? trace_lock_release+0x137/0x1a0 [ 1161.129126][T23614] security_path_truncate+0xc0/0x140 [ 1161.129137][T23614] do_sys_ftruncate+0x443/0x690 [ 1161.129150][T23614] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1161.129159][T23614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xb3 [ 1161.129172][T23614] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1161.227360][T23614] ? do_syscall_64+0x19/0x1b0 [ 1161.232015][T23614] do_syscall_64+0xf3/0x1b0 [ 1161.236516][T23614] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1161.242540][T23614] RIP: 0033:0x45c9f7 [ 1161.246412][T23614] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 3c e5 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1161.265993][T23614] RSP: 002b:00007fef90227a68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1161.274437][T23614] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c9f7 [ 1161.282518][T23614] RDX: 0000000020010288 RSI: 0000000000000800 RDI: 0000000000000004 [ 1161.290475][T23614] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1161.298438][T23614] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 1161.306398][T23614] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1161.358369][T23633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1161.359168][T23614] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1161.381364][T23623] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:22:27 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000200000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x40}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'veth0_to_batadv\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xc, 0x0, {0x8, 0x1000, 0x544}}) [ 1161.403889][T23633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1161.414476][T23623] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1161.436878][T23623] EXT4-fs (loop3): group descriptors corrupted! 13:22:27 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000030000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1161.643303][T23646] EXT4-fs (loop2): invalid inodes per group: 131200 [ 1161.643303][T23646] [ 1161.722442][T23657] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.736488][T23657] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1161.748893][T23657] EXT4-fs (loop3): group descriptors corrupted! 13:22:29 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:29 executing program 1 (fault-call:0 fault-nth:8): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xd, 0x0, {0x8, 0x1000, 0x544}}) 13:22:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="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"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:29 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000300000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:29 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000040000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xe, 0x0, {0x8, 0x1000, 0x544}}) [ 1164.076570][T23686] FAULT_INJECTION: forcing a failure. [ 1164.076570][T23686] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.091225][T23685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.105535][T23685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.118150][T23686] CPU: 1 PID: 23686 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 13:22:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x10, 0x0, {0x8, 0x1000, 0x544}}) [ 1164.126837][T23686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.136888][T23686] Call Trace: [ 1164.140180][T23686] dump_stack+0x1e9/0x30e [ 1164.144510][T23686] should_fail+0x433/0x5b0 [ 1164.148934][T23686] ? tomoyo_encode2+0x25a/0x560 [ 1164.153779][T23686] should_failslab+0x5/0x20 [ 1164.158372][T23686] __kmalloc+0x74/0x330 [ 1164.163299][T23686] tomoyo_encode2+0x25a/0x560 [ 1164.167988][T23686] ? dynamic_dname+0xf0/0xf0 [ 1164.172597][T23686] tomoyo_realpath_from_path+0x5d6/0x630 [ 1164.178232][T23686] tomoyo_path_perm+0x17d/0x740 [ 1164.183085][T23686] ? trace_lock_release+0x137/0x1a0 [ 1164.188275][T23686] security_path_truncate+0xc0/0x140 [ 1164.193537][T23686] do_sys_ftruncate+0x443/0x690 [ 1164.198382][T23686] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1164.204079][T23686] ? entry_SYSCALL_64_after_hwframe+0x3e/0xb3 [ 1164.210128][T23686] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1164.215740][T23686] ? do_syscall_64+0x19/0x1b0 [ 1164.220393][T23686] do_syscall_64+0xf3/0x1b0 [ 1164.224872][T23686] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1164.230738][T23686] RIP: 0033:0x45c9f7 [ 1164.234612][T23686] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 3c e5 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1164.254208][T23686] RSP: 002b:00007fef90227a68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 1164.262742][T23686] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c9f7 13:22:30 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f00000000c0)=0x3) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000c64209000000000000001ec7", @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) accept(r7, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) [ 1164.270695][T23686] RDX: 0000000020010288 RSI: 0000000000000800 RDI: 0000000000000004 [ 1164.278644][T23686] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1164.286601][T23686] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 1164.294569][T23686] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1164.316125][T23686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1164.349122][T23683] EXT4-fs (loop2): invalid inodes per group: 196736 [ 1164.349122][T23683] [ 1164.360229][T23702] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1164.384696][T23712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x11, 0x0, {0x8, 0x1000, 0x544}}) 13:22:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000400000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x12, 0x0, {0x8, 0x1000, 0x544}}) [ 1164.403634][T23686] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1164.416275][T23702] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1164.432110][T23702] EXT4-fs (loop3): group descriptors corrupted! [ 1164.441839][T23718] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.660414][T23730] EXT4-fs (loop2): invalid inodes per group: 262272 [ 1164.660414][T23730] 13:22:32 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:32 executing program 1 (fault-call:0 fault-nth:9): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x25, 0x0, {0x8, 0x1000, 0x544}}) 13:22:32 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000500000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:32 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x9995, 0x6, 0x28}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@setlink={0x2c8, 0x13, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10038, 0x800}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_VFINFO_LIST={0x238, 0x16, 0x0, 0x1, [{0xd0, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}}, @IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0x7, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1000, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x182, 0xca2, 0x1, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0xb87, 0x400, 0x8100}}, {0x14, 0x1, {0x7b3, 0xb60, 0x7, 0x9a8}}, {0x14, 0x1, {0xffff, 0x6c8, 0x5, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x1}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x400, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10000, 0x8}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2a, 0xa58, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x40, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1f, 0x26c, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x22}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x80}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x5}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x489, 0x1, 0x88a8}}, {0x14, 0x1, {0x5, 0x1f7, 0x3, 0x8100}}, {0x14, 0x1, {0x4, 0x30c, 0x6, 0x8100}}]}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x1c3, 0x1, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x2}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffffff, 0x9be, 0x1, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0xffff3433}}, @IFLA_VF_RATE={0x10, 0x6, {0xbf9e, 0x400, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x5}}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xe}, @IFLA_XDP_FD={0x8}]}]}, 0x2c8}}, 0x0) 13:22:32 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000050000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x5c, 0x0, {0x8, 0x1000, 0x544}}) [ 1167.122121][T23759] FAULT_INJECTION: forcing a failure. [ 1167.122121][T23759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1167.136004][T23756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.157115][T23759] CPU: 1 PID: 23759 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1167.163363][T23768] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.166333][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.185641][T23759] Call Trace: [ 1167.188932][T23759] dump_stack+0x1e9/0x30e [ 1167.193414][T23759] should_fail+0x433/0x5b0 [ 1167.197921][T23759] prepare_alloc_pages+0x28c/0x4a0 [ 1167.203020][T23759] __alloc_pages_nodemask+0xbc/0x5e0 [ 1167.208294][T23759] ? check_preemption_disabled+0x40/0x240 [ 1167.214005][T23759] ? __this_cpu_preempt_check+0x9/0x20 [ 1167.219463][T23759] alloc_pages_vma+0x4dd/0xd10 [ 1167.224232][T23759] ? mpol_shared_policy_lookup+0x15e/0x200 [ 1167.230037][T23759] shmem_alloc_and_acct_page+0x40e/0xbe0 [ 1167.235653][T23759] shmem_getpage_gfp+0x1580/0x3120 [ 1167.240756][T23759] ? read_seqcount_begin+0x122/0x1c0 [ 1167.246019][T23759] shmem_write_begin+0xcd/0x1a0 [ 1167.250856][T23759] generic_perform_write+0x23b/0x4e0 [ 1167.256839][T23759] __generic_file_write_iter+0x22b/0x4e0 [ 1167.262458][T23759] ? down_write+0xcd/0x130 [ 1167.266941][T23759] generic_file_write_iter+0x4a6/0x650 [ 1167.272480][T23759] __vfs_write+0x54c/0x710 [ 1167.276914][T23759] vfs_write+0x274/0x580 [ 1167.281159][T23759] __x64_sys_pwrite64+0x151/0x1c0 [ 1167.286166][T23759] do_syscall_64+0xf3/0x1b0 [ 1167.290687][T23759] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1167.296553][T23759] RIP: 0033:0x416887 13:22:33 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3, 0x8}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1167.300425][T23759] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1167.323825][T23759] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1167.332217][T23759] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416887 [ 1167.340167][T23759] RDX: 00000000000004db RSI: 00000000200000c0 RDI: 0000000000000004 [ 1167.348125][T23759] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1167.356083][T23759] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000003 [ 1167.364051][T23759] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1167.419416][T23759] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1167.429542][T23772] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1167.450496][T23785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xe7, 0x0, {0x8, 0x1000, 0x544}}) 13:22:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x300, 0x0, {0x8, 0x1000, 0x544}}) 13:22:33 executing program 1 (fault-call:0 fault-nth:10): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:33 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1167.462276][T23772] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1167.472873][T23785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.483820][T23772] EXT4-fs (loop3): group descriptors corrupted! [ 1167.497087][T23773] EXT4-fs (loop2): invalid inodes per group: 327808 [ 1167.497087][T23773] 13:22:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x500, 0x0, {0x8, 0x1000, 0x544}}) [ 1167.577063][T23802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.596728][T23804] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.629428][T23807] FAULT_INJECTION: forcing a failure. [ 1167.629428][T23807] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.642346][T23807] CPU: 0 PID: 23807 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1167.650996][T23807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.661034][T23807] Call Trace: [ 1167.664342][T23807] dump_stack+0x1e9/0x30e [ 1167.668671][T23807] should_fail+0x433/0x5b0 [ 1167.673091][T23807] ? getname_flags+0xb8/0x610 [ 1167.677770][T23807] should_failslab+0x5/0x20 [ 1167.682272][T23807] kmem_cache_alloc+0x53/0x2d0 [ 1167.687038][T23807] getname_flags+0xb8/0x610 [ 1167.691539][T23807] do_sys_openat2+0x40d/0x770 [ 1167.696220][T23807] __x64_sys_open+0x1af/0x1e0 [ 1167.700900][T23807] do_syscall_64+0xf3/0x1b0 [ 1167.705407][T23807] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1167.711293][T23807] RIP: 0033:0x416821 [ 1167.715188][T23807] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1167.734786][T23807] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1167.743190][T23807] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416821 [ 1167.751136][T23807] RDX: 00007fef90227b0a RSI: 0000000000000002 RDI: 00007fef90227b00 [ 1167.759079][T23807] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1167.767021][T23807] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1167.774970][T23807] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:35 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRESDEC=r0, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r8 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:35 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000060000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:35 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000600000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x600, 0x0, {0x8, 0x1000, 0x544}}) 13:22:35 executing program 1 (fault-call:0 fault-nth:11): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x700, 0x0, {0x8, 0x1000, 0x544}}) [ 1170.150542][T23829] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.178369][T23829] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.193637][T23832] FAULT_INJECTION: forcing a failure. [ 1170.193637][T23832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.206861][T23832] CPU: 0 PID: 23832 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1170.215612][T23832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.225660][T23832] Call Trace: [ 1170.228978][T23832] dump_stack+0x1e9/0x30e [ 1170.233336][T23832] should_fail+0x433/0x5b0 [ 1170.237748][T23832] prepare_alloc_pages+0x28c/0x4a0 [ 1170.243814][T23832] __alloc_pages_nodemask+0xbc/0x5e0 13:22:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x86e, 0x0, {0x8, 0x1000, 0x544}}) [ 1170.249100][T23832] ? generic_file_write_iter+0x522/0x650 [ 1170.254739][T23832] kmem_getpages+0x49/0x900 [ 1170.259243][T23832] cache_grow_begin+0x7b/0x2e0 [ 1170.264026][T23832] cache_alloc_refill+0x359/0x3f0 [ 1170.269153][T23832] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1170.275089][T23832] ? check_preemption_disabled+0xb0/0x240 [ 1170.280900][T23832] ? debug_smp_processor_id+0x5/0x20 [ 1170.286166][T23832] ? getname_flags+0xb8/0x610 [ 1170.290876][T23832] kmem_cache_alloc+0x2b5/0x2d0 [ 1170.295811][T23832] getname_flags+0xb8/0x610 [ 1170.300292][T23832] do_sys_openat2+0x40d/0x770 [ 1170.304947][T23832] __x64_sys_open+0x1af/0x1e0 [ 1170.309620][T23832] do_syscall_64+0xf3/0x1b0 [ 1170.314237][T23832] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1170.320114][T23832] RIP: 0033:0x416821 [ 1170.323982][T23832] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1170.343710][T23832] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1170.352103][T23832] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416821 [ 1170.360070][T23832] RDX: 00007fef90227b0a RSI: 0000000000000002 RDI: 00007fef90227b00 [ 1170.368041][T23832] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1170.376017][T23832] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1170.383979][T23832] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x900, 0x0, {0x8, 0x1000, 0x544}}) [ 1170.422800][T23825] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1170.434318][T23825] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1170.446356][T23825] EXT4-fs (loop3): group descriptors corrupted! [ 1170.452924][T23832] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1170.462684][T23852] EXT4-fs (loop2): invalid inodes per group: 393344 [ 1170.462684][T23852] 13:22:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400210100338400000000001a00d69e2a5573f00000", @ANYRES32=0x0, @ANYBLOB="140006000700000001040000040000000700000014000100ff010000000000000000000000000001"], 0x40}}, 0x20000014) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) accept4(0xffffffffffffffff, &(0x7f0000000600)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000680)=0x80, 0x80000) sendmsg$can_raw(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x1d, r4}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "798f59c2af2e4283"}, 0x10}, 0x1, 0x0, 0x0, 0xa048000}, 0x40081) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400ec3f0000000000ddffb30b1e74ff0100ffffac141447432f02a025a50c7a85000100000000"], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) timerfd_create(0x8, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000f61300210100de0000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1c, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f00000003c0)="8dc8f60afcef6431f30f5615956890a8d096a60781aeb87072f4d35f7936c20b79c699397595fddb3dba52bc528847155180bc0accbc47e3de5ecdda4cbe3ea6c590e0d25e0856219b670312a8cb844b3e06fdc0a214e35d7d7473b20e4e2499d3a31ffe22b8daf382f88e95398f2ccb2a912e37b1688353ad1525c4cc52cb2941fbaf3cf4ac9943f17359209c79cb7c57cdf08c4e681fa61c8d8e557d8888d16f16badd9b04ce0c4f9837a828d405e947c94bd09a9118e9d6d027e0437f7740bad04f276172ba7df62fce5007e6edda99a296539feb4987fb8225a76312ef1de2") 13:22:36 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000070000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:36 executing program 1 (fault-call:0 fault-nth:12): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1170.656332][T23877] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.672906][T23879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1170.752070][T23886] FAULT_INJECTION: forcing a failure. [ 1170.752070][T23886] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.765244][T23886] CPU: 0 PID: 23886 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1170.774044][T23886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.784085][T23886] Call Trace: [ 1170.787363][T23886] dump_stack+0x1e9/0x30e [ 1170.791674][T23886] should_fail+0x433/0x5b0 [ 1170.796084][T23886] ? security_file_alloc+0x32/0x200 [ 1170.801256][T23886] should_failslab+0x5/0x20 [ 1170.805829][T23886] kmem_cache_alloc+0x53/0x2d0 [ 1170.810577][T23886] security_file_alloc+0x32/0x200 [ 1170.815573][T23886] __alloc_file+0xd7/0x390 [ 1170.819980][T23886] alloc_empty_file+0xa9/0x1b0 [ 1170.824720][T23886] path_openat+0xa8/0x38b0 [ 1170.829124][T23886] ? __kasan_kmalloc+0x114/0x160 [ 1170.834037][T23886] ? kmem_cache_alloc+0x1f5/0x2d0 [ 1170.839135][T23886] ? do_sys_openat2+0x40d/0x770 [ 1170.843989][T23886] ? do_syscall_64+0xf3/0x1b0 [ 1170.848653][T23886] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1170.854694][T23886] ? trace_lock_release+0x137/0x1a0 [ 1170.859879][T23886] ? lock_acquire+0x169/0x480 [ 1170.864528][T23886] ? generic_file_write_iter+0x85/0x650 [ 1170.870062][T23886] ? generic_file_write_iter+0x522/0x650 [ 1170.875686][T23886] do_filp_open+0x191/0x3a0 [ 1170.880164][T23886] ? do_raw_spin_unlock+0x134/0x8d0 [ 1170.885337][T23886] ? _raw_spin_unlock+0x24/0x40 [ 1170.890176][T23886] ? __alloc_fd+0x566/0x600 [ 1170.894654][T23886] do_sys_openat2+0x463/0x770 [ 1170.899303][T23886] __x64_sys_open+0x1af/0x1e0 [ 1170.903965][T23886] do_syscall_64+0xf3/0x1b0 [ 1170.908456][T23886] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1170.914333][T23886] RIP: 0033:0x416821 [ 1170.918199][T23886] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1170.937793][T23886] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1170.946192][T23886] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416821 [ 1170.954140][T23886] RDX: 00007fef90227b0a RSI: 0000000000000002 RDI: 00007fef90227b00 [ 1170.962084][T23886] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1170.970027][T23886] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1170.977970][T23886] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1171.018549][T23882] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1171.030391][T23882] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1171.041798][T23882] EXT4-fs (loop3): group descriptors corrupted! 13:22:39 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xa00, 0x0, {0x8, 0x1000, 0x544}}) 13:22:39 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000003c0)={{0x0, 0x0, 0x80, {0x4, 0x6000, 0x2}}, "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", "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"}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210600000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:39 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000700000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:39 executing program 1 (fault-call:0 fault-nth:13): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:39 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000080000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1173.232994][T23904] FAULT_INJECTION: forcing a failure. [ 1173.232994][T23904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1173.246220][T23904] CPU: 1 PID: 23904 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1173.254882][T23904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.264927][T23904] Call Trace: [ 1173.268212][T23904] dump_stack+0x1e9/0x30e [ 1173.269696][T23903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xb00, 0x0, {0x8, 0x1000, 0x544}}) 13:22:39 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @private=0xa010100}}]}, 0x40}}, 0x0) [ 1173.272564][T23904] should_fail+0x433/0x5b0 [ 1173.272580][T23904] prepare_alloc_pages+0x28c/0x4a0 [ 1173.272595][T23904] __alloc_pages_nodemask+0xbc/0x5e0 [ 1173.291221][T23915] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.291473][T23904] kmem_getpages+0x49/0x900 [ 1173.310526][T23904] cache_grow_begin+0x7b/0x2e0 [ 1173.315299][T23904] cache_alloc_refill+0x359/0x3f0 [ 1173.320325][T23904] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1173.326038][T23904] ? check_preemption_disabled+0xb0/0x240 [ 1173.331753][T23904] ? debug_smp_processor_id+0x5/0x20 [ 1173.337039][T23904] __kmalloc+0x30c/0x330 [ 1173.341286][T23904] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1173.347254][T23904] tomoyo_realpath_from_path+0xd8/0x630 [ 1173.352850][T23904] ? memset+0x1f/0x40 [ 1173.356827][T23904] tomoyo_check_open_permission+0x1b6/0x900 [ 1173.362779][T23904] security_file_open+0x50/0xc0 [ 1173.367632][T23904] do_dentry_open+0x35d/0x10b0 [ 1173.372443][T23904] path_openat+0x2790/0x38b0 [ 1173.377010][T23904] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1173.383050][T23904] ? trace_lock_release+0x137/0x1a0 [ 1173.388241][T23904] do_filp_open+0x191/0x3a0 [ 1173.392728][T23904] ? _raw_spin_unlock+0x24/0x40 [ 1173.397553][T23904] ? __alloc_fd+0x566/0x600 [ 1173.402117][T23904] do_sys_openat2+0x463/0x770 [ 1173.406786][T23904] __x64_sys_open+0x1af/0x1e0 [ 1173.411451][T23904] do_syscall_64+0xf3/0x1b0 [ 1173.415992][T23904] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1173.421906][T23904] RIP: 0033:0x416821 [ 1173.425813][T23904] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1173.445412][T23904] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1173.453829][T23904] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416821 [ 1173.461773][T23904] RDX: 00007fef90227b0a RSI: 0000000000000002 RDI: 00007fef90227b00 [ 1173.469719][T23904] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 13:22:39 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) [ 1173.477662][T23904] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1173.485609][T23904] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:39 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000800000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1173.562702][T23904] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1173.586617][T23917] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xc00, 0x0, {0x8, 0x1000, 0x544}}) 13:22:39 executing program 1 (fault-call:0 fault-nth:14): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1173.605390][T23927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1173.628147][T23917] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1173.650993][T23917] EXT4-fs (loop3): group descriptors corrupted! 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xd00, 0x0, {0x8, 0x1000, 0x544}}) [ 1173.743046][T23938] EXT4-fs (loop2): invalid inodes per group: 524416 [ 1173.743046][T23938] [ 1173.767436][T23953] FAULT_INJECTION: forcing a failure. [ 1173.767436][T23953] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.781560][T23953] CPU: 0 PID: 23953 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1173.790233][T23953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.800269][T23953] Call Trace: [ 1173.803571][T23953] dump_stack+0x1e9/0x30e [ 1173.807877][T23953] should_fail+0x433/0x5b0 [ 1173.812271][T23953] ? tomoyo_encode2+0x25a/0x560 [ 1173.817096][T23953] should_failslab+0x5/0x20 [ 1173.821572][T23953] __kmalloc+0x74/0x330 [ 1173.825716][T23953] tomoyo_encode2+0x25a/0x560 [ 1173.830392][T23953] tomoyo_realpath_from_path+0x5d6/0x630 [ 1173.835996][T23953] ? memset+0x1f/0x40 [ 1173.839955][T23953] tomoyo_check_open_permission+0x1b6/0x900 [ 1173.845835][T23953] security_file_open+0x50/0xc0 [ 1173.850693][T23953] do_dentry_open+0x35d/0x10b0 [ 1173.855437][T23953] path_openat+0x2790/0x38b0 [ 1173.860003][T23953] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1173.866080][T23953] do_filp_open+0x191/0x3a0 [ 1173.870564][T23953] ? _raw_spin_unlock+0x24/0x40 [ 1173.875402][T23953] ? __alloc_fd+0x566/0x600 [ 1173.880146][T23953] do_sys_openat2+0x463/0x770 [ 1173.884816][T23953] __x64_sys_open+0x1af/0x1e0 [ 1173.889469][T23953] do_syscall_64+0xf3/0x1b0 [ 1173.893947][T23953] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1173.899814][T23953] RIP: 0033:0x416821 [ 1173.903686][T23953] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1173.923288][T23953] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1173.931684][T23953] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416821 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xe00, 0x0, {0x8, 0x1000, 0x544}}) [ 1173.939646][T23953] RDX: 00007fef90227b0a RSI: 0000000000000002 RDI: 00007fef90227b00 [ 1173.947594][T23953] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1173.955713][T23953] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1173.963672][T23953] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1173.980654][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:39 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1174.000559][T23953] ERROR: Out of memory at tomoyo_realpath_from_path. 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x1100, 0x0, {0x8, 0x1000, 0x544}}) 13:22:39 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:39 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000090000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x1200, 0x0, {0x8, 0x1000, 0x544}}) [ 1174.057046][T23953] EXT4-fs (loop1): Invalid log cluster size: 1280 13:22:40 executing program 1 (fault-call:0 fault-nth:15): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1174.155918][T23977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1174.175442][T23982] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1174.282945][T23988] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1174.297414][T23988] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1174.318415][T23998] FAULT_INJECTION: forcing a failure. [ 1174.318415][T23998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.331666][T23998] CPU: 0 PID: 23998 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1174.340334][T23998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.350388][T23998] Call Trace: [ 1174.353674][T23998] dump_stack+0x1e9/0x30e [ 1174.358004][T23998] should_fail+0x433/0x5b0 [ 1174.362420][T23998] prepare_alloc_pages+0x28c/0x4a0 [ 1174.367563][T23998] __alloc_pages_nodemask+0xbc/0x5e0 [ 1174.372853][T23998] kmem_getpages+0x49/0x900 [ 1174.377355][T23998] cache_grow_begin+0x7b/0x2e0 [ 1174.382121][T23998] cache_alloc_refill+0x359/0x3f0 [ 1174.387141][T23998] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1174.392853][T23998] ? check_preemption_disabled+0xb0/0x240 [ 1174.398568][T23998] ? debug_smp_processor_id+0x5/0x20 [ 1174.403851][T23998] __kmalloc+0x30c/0x330 [ 1174.408100][T23998] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1174.413815][T23998] tomoyo_realpath_from_path+0xd8/0x630 [ 1174.419360][T23998] ? memset+0x1f/0x40 [ 1174.423340][T23998] tomoyo_check_open_permission+0x1b6/0x900 [ 1174.429281][T23998] security_file_open+0x50/0xc0 [ 1174.434139][T23998] do_dentry_open+0x35d/0x10b0 [ 1174.438909][T23998] path_openat+0x2790/0x38b0 [ 1174.443497][T23998] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1174.449573][T23998] do_filp_open+0x191/0x3a0 [ 1174.454081][T23998] ? _raw_spin_unlock+0x24/0x40 [ 1174.458925][T23998] ? __alloc_fd+0x566/0x600 [ 1174.463428][T23998] do_sys_openat2+0x463/0x770 [ 1174.468108][T23998] __x64_sys_open+0x1af/0x1e0 [ 1174.472783][T23998] do_syscall_64+0xf3/0x1b0 [ 1174.477379][T23998] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1174.483263][T23998] RIP: 0033:0x416821 [ 1174.487153][T23998] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1174.506752][T23998] RSP: 002b:00007fef90227a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1174.515160][T23998] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 0000000000416821 [ 1174.523129][T23998] RDX: 00007fef90227b0a RSI: 0000000000000002 RDI: 00007fef90227b00 [ 1174.531099][T23998] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1174.540224][T23998] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1174.548286][T23998] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1174.582573][T23998] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1174.590709][T23988] EXT4-fs (loop3): group descriptors corrupted! 13:22:42 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:42 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000900000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a8500010000000000000000000080ac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x2500, 0x0, {0x8, 0x1000, 0x544}}) 13:22:42 executing program 1 (fault-call:0 fault-nth:16): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:42 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000a0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x5c00, 0x0, {0x8, 0x1000, 0x544}}) [ 1176.577442][T24028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1176.592454][T24028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1176.605235][T24027] FAULT_INJECTION: forcing a failure. [ 1176.605235][T24027] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.626025][T24027] CPU: 0 PID: 24027 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1176.634720][T24027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.644783][T24027] Call Trace: [ 1176.648079][T24027] dump_stack+0x1e9/0x30e [ 1176.652412][T24027] should_fail+0x433/0x5b0 [ 1176.656834][T24027] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1176.662551][T24027] should_failslab+0x5/0x20 [ 1176.667054][T24027] __kmalloc+0x74/0x330 [ 1176.671209][T24027] ? tomoyo_realpath_from_path+0xcb/0x630 13:22:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100000001, 0x2000) r2 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f00000001c0), 0x4000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x4008004) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="140002000000000000fdffff0100ffffad1414470c7a850001000000000000000000ffffac1414aa371e7168c5f2c4c1b1ae12234bbe68f1c1c2652ce54e92658c40d04f0ec42bbe0350778631440000e81a908ae59b75bd6351fd5d65b6ec7614427222c3604a26b02c9a5ca184dcb9cac695b415cffdacfe8b9b2356"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xfee2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1176.676938][T24027] tomoyo_realpath_from_path+0xd8/0x630 [ 1176.682508][T24027] tomoyo_path_number_perm+0x18f/0x690 [ 1176.687982][T24027] security_file_ioctl+0x55/0xb0 [ 1176.692920][T24027] __se_sys_ioctl+0x48/0x160 [ 1176.697601][T24027] do_syscall_64+0xf3/0x1b0 [ 1176.702104][T24027] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1176.707991][T24027] RIP: 0033:0x45c8f7 [ 1176.711908][T24027] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1176.731725][T24027] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.741460][T24027] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1176.749423][T24027] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1176.757407][T24027] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1176.765365][T24027] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 13:22:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x6e08, 0x0, {0x8, 0x1000, 0x544}}) [ 1176.773339][T24027] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1176.783018][T24027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1176.818515][T24027] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1176.828257][T24022] EXT4-fs (loop2): invalid inodes per group: 589952 [ 1176.828257][T24022] 13:22:42 executing program 1 (fault-call:0 fault-nth:17): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1176.874602][T24041] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:22:42 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000a00000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffe04) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0xc00c55ca, &(0x7f00000004c0)='syz0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1176.923018][T24041] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1176.947167][T24063] FAULT_INJECTION: forcing a failure. [ 1176.947167][T24063] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.974623][T24041] EXT4-fs (loop3): group descriptors corrupted! [ 1176.976541][T24063] CPU: 1 PID: 24063 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1176.989554][T24063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.000039][T24063] Call Trace: [ 1177.003325][T24063] dump_stack+0x1e9/0x30e [ 1177.007652][T24063] should_fail+0x433/0x5b0 [ 1177.012087][T24063] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1177.017895][T24063] should_failslab+0x5/0x20 [ 1177.022388][T24063] __kmalloc+0x74/0x330 [ 1177.026541][T24063] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1177.032247][T24063] tomoyo_realpath_from_path+0xd8/0x630 [ 1177.037775][T24063] tomoyo_path_number_perm+0x18f/0x690 [ 1177.043226][T24063] security_file_ioctl+0x55/0xb0 [ 1177.048151][T24063] __se_sys_ioctl+0x48/0x160 [ 1177.052715][T24063] do_syscall_64+0xf3/0x1b0 [ 1177.057215][T24063] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1177.063084][T24063] RIP: 0033:0x45c8f7 [ 1177.066952][T24063] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1177.086633][T24063] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.095031][T24063] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1177.102981][T24063] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1177.110935][T24063] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1177.118885][T24063] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1177.126834][T24063] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1177.136941][T24063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1177.195208][T24063] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1177.222282][T24074] EXT4-fs (loop2): invalid inodes per group: 655488 [ 1177.222282][T24074] 13:22:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xe7ff, 0x0, {0x8, 0x1000, 0x544}}) 13:22:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x440000, 0x0) 13:22:45 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:45 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000b0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:45 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000b00000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:45 executing program 1 (fault-call:0 fault-nth:18): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xfdfd, 0x0, {0x8, 0x1000, 0x544}}) [ 1179.613309][T24103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.638872][T24111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1179.654256][T24106] FAULT_INJECTION: forcing a failure. [ 1179.654256][T24106] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.681760][T24106] CPU: 1 PID: 24106 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1179.690453][T24106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.700553][T24106] Call Trace: [ 1179.703849][T24106] dump_stack+0x1e9/0x30e [ 1179.708177][T24106] should_fail+0x433/0x5b0 13:22:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xffe7, 0x0, {0x8, 0x1000, 0x544}}) [ 1179.712601][T24106] ? tomoyo_encode2+0x25a/0x560 [ 1179.717455][T24106] should_failslab+0x5/0x20 [ 1179.721947][T24106] __kmalloc+0x74/0x330 [ 1179.726324][T24106] tomoyo_encode2+0x25a/0x560 [ 1179.731096][T24106] tomoyo_realpath_from_path+0x5d6/0x630 [ 1179.736709][T24106] tomoyo_path_number_perm+0x18f/0x690 [ 1179.742183][T24106] security_file_ioctl+0x55/0xb0 [ 1179.747118][T24106] __se_sys_ioctl+0x48/0x160 [ 1179.751697][T24106] do_syscall_64+0xf3/0x1b0 [ 1179.756205][T24106] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1179.762072][T24106] RIP: 0033:0x45c8f7 [ 1179.765943][T24106] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1179.785536][T24106] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.794039][T24106] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1179.801990][T24106] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 13:22:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001440)=@get={0x1, &(0x7f00000013c0)=""/65, 0x2}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="4000000014002101000000d1d97054fb00000000000a080000", @ANYRES32=r2, @ANYRES64], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x4000}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockopt$inet_dccp_buf(r5, 0x21, 0xe, &(0x7f00000003c0)=""/4096, &(0x7f0000000000)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1179.809944][T24106] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1179.817911][T24106] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1179.825876][T24106] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1179.838356][T24106] ERROR: Out of memory at tomoyo_realpath_from_path. 13:22:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x1000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x2000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1179.888103][T24099] EXT4-fs (loop2): invalid inodes per group: 721024 [ 1179.888103][T24099] [ 1179.905555][T24106] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1179.916847][T24104] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:22:45 executing program 1 (fault-call:0 fault-nth:19): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x2, {0x1, 0x0, 0x1}, {0x1, 0xf0}, 0x1, 0x2}, {0x3, 0x1, {0x0, 0xf0, 0x4}, {0x1}, 0x0, 0x1}, {0x0, 0x1, {0x3, 0x1, 0x1}, {0x0, 0xf0, 0x1}, 0xff, 0xfd}, {0x0, 0x2, {0x3, 0xff, 0x1}, {0x0, 0xf0}, 0xff, 0xfd}, {0x2, 0x2, {0x1}, {0x2, 0xff, 0x2}, 0x0, 0x1}, {0x8, 0x0, {0x2, 0xff, 0x1}, {0x0, 0x1, 0x2}, 0x2}, {0x3, 0x2, {0x1, 0x1, 0xba1d167c5fd93fdf}, {0x1, 0xff, 0x4}, 0xff, 0x1}, {0x0, 0x0, {0x1, 0xff, 0x4}, {0x2, 0xff, 0x2}, 0x0, 0x1}], 0x100) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1179.940181][T24104] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1179.959254][T24104] EXT4-fs (loop3): group descriptors corrupted! 13:22:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x3000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1180.036729][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.052350][T24150] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.069370][T24145] FAULT_INJECTION: forcing a failure. [ 1180.069370][T24145] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.082345][T24145] CPU: 1 PID: 24145 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1180.091009][T24145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.101083][T24145] Call Trace: [ 1180.104366][T24145] dump_stack+0x1e9/0x30e [ 1180.108680][T24145] should_fail+0x433/0x5b0 [ 1180.113134][T24145] ? __kernfs_new_node+0x8b/0x600 [ 1180.118151][T24145] should_failslab+0x5/0x20 [ 1180.122643][T24145] kmem_cache_alloc+0x53/0x2d0 [ 1180.127849][T24145] __kernfs_new_node+0x8b/0x600 [ 1180.132690][T24145] kernfs_create_dir_ns+0x90/0x220 [ 1180.137783][T24145] internal_create_group+0x1e2/0xd20 [ 1180.143045][T24145] ? up_write+0xe9/0x450 [ 1180.147264][T24145] loop_set_fd+0xf9a/0x14e0 [ 1180.151760][T24145] lo_ioctl+0xc4/0x2140 [ 1180.155907][T24145] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1180.161606][T24145] ? kfree+0x141/0x220 [ 1180.165650][T24145] ? rcu_lock_release+0x5/0x20 [ 1180.170400][T24145] ? tomoyo_path_number_perm+0x58f/0x690 [ 1180.176012][T24145] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1180.181357][T24145] ? lo_release+0x1e0/0x1e0 [ 1180.185834][T24145] blkdev_ioctl+0x2a6/0x5c0 [ 1180.190315][T24145] block_ioctl+0xbc/0x100 [ 1180.194620][T24145] ? blkdev_iopoll+0xf0/0xf0 [ 1180.199197][T24145] __se_sys_ioctl+0xf9/0x160 [ 1180.203779][T24145] do_syscall_64+0xf3/0x1b0 [ 1180.208256][T24145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1180.214128][T24145] RIP: 0033:0x45c8f7 [ 1180.218156][T24145] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1180.238173][T24145] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1180.246665][T24145] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1180.254631][T24145] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1180.262579][T24145] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1180.271147][T24145] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1180.279104][T24145] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1180.361566][T24145] EXT4-fs (loop1): Invalid log cluster size: 1280 13:22:48 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sendmsg$AUDIT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfe, {0x42, 0x0, 0x0, r2, 0x3, 0xdb98, 0xfd7d, 0x0, 0x1}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x4) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000250a000000", @ANYRES32=r3, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400230001000000000000000a000000ad6f9c566e5e71794794826834b66011520e1ea6edf27b35a385fec6679d1aa9bd37809d3cad5e3b472667e28ab2bbec313f0619215eab9c6c3e65098a45b1139507a5f1bd252429efa5555ece8eb6f426182a0624b3", @ANYRES32=r7, @ANYBLOB="14000200fc0000000000000000000000000000011400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, r8}) 13:22:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x4000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:48 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000c00000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:48 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000c0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:48 executing program 1 (fault-call:0 fault-nth:20): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x5000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1182.679059][T24181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.692717][T24183] FAULT_INJECTION: forcing a failure. [ 1182.692717][T24183] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.705745][T24181] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.707013][T24183] CPU: 1 PID: 24183 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1182.716466][T24181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.723700][T24183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.723704][T24183] Call Trace: [ 1182.723721][T24183] dump_stack+0x1e9/0x30e [ 1182.723732][T24183] should_fail+0x433/0x5b0 [ 1182.723745][T24183] ? __kernfs_new_node+0x8b/0x600 [ 1182.723753][T24183] should_failslab+0x5/0x20 [ 1182.723762][T24183] kmem_cache_alloc+0x53/0x2d0 [ 1182.723772][T24183] __kernfs_new_node+0x8b/0x600 [ 1182.723782][T24183] ? kernfs_activate+0x30/0x4d0 [ 1182.723798][T24183] ? do_raw_spin_unlock+0x134/0x8d0 [ 1182.739844][T24181] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1182.743109][T24183] ? kernfs_add_one+0x4b7/0x600 [ 1182.798674][T24183] kernfs_new_node+0x95/0x160 [ 1182.803324][T24183] __kernfs_create_file+0x45/0x2d0 [ 1182.808421][T24183] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1182.813790][T24183] internal_create_group+0x445/0xd20 [ 1182.819049][T24183] ? up_write+0xe9/0x450 [ 1182.823262][T24183] loop_set_fd+0xf9a/0x14e0 [ 1182.827750][T24183] lo_ioctl+0xc4/0x2140 [ 1182.831878][T24183] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1182.837481][T24183] ? kfree+0x141/0x220 [ 1182.841521][T24183] ? rcu_lock_release+0x5/0x20 [ 1182.846260][T24183] ? tomoyo_path_number_perm+0x58f/0x690 [ 1182.851881][T24183] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1182.857247][T24183] ? lo_release+0x1e0/0x1e0 [ 1182.861829][T24183] blkdev_ioctl+0x2a6/0x5c0 [ 1182.866305][T24183] block_ioctl+0xbc/0x100 [ 1182.870621][T24183] ? blkdev_iopoll+0xf0/0xf0 [ 1182.875182][T24183] __se_sys_ioctl+0xf9/0x160 [ 1182.879745][T24183] do_syscall_64+0xf3/0x1b0 [ 1182.884223][T24183] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1182.890109][T24183] RIP: 0033:0x45c8f7 [ 1182.893977][T24183] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1182.913579][T24183] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.921978][T24183] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 13:22:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000048140021c6711efaffffffffffffff0a20", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_RESUME(r6, 0x4147, 0x0) [ 1182.929925][T24183] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1182.937887][T24183] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1182.945855][T24183] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1182.953805][T24183] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x6000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1183.047479][T24183] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1183.080110][T24214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:48 executing program 1 (fault-call:0 fault-nth:21): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x7000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:49 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000d00000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1183.132104][T24201] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1183.168108][T24214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1183.192219][T24201] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1183.237903][T24231] FAULT_INJECTION: forcing a failure. [ 1183.237903][T24231] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.254447][T24201] EXT4-fs (loop3): group descriptors corrupted! [ 1183.257420][T24231] CPU: 1 PID: 24231 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1183.269389][T24231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.279456][T24231] Call Trace: [ 1183.282863][T24231] dump_stack+0x1e9/0x30e [ 1183.287200][T24231] should_fail+0x433/0x5b0 [ 1183.291608][T24231] ? __kernfs_new_node+0x8b/0x600 [ 1183.296658][T24231] should_failslab+0x5/0x20 [ 1183.301146][T24231] kmem_cache_alloc+0x53/0x2d0 [ 1183.305900][T24231] ? kernfs_activate+0x30/0x4d0 [ 1183.310727][T24231] __kernfs_new_node+0x8b/0x600 [ 1183.315568][T24231] ? kernfs_add_one+0x4b7/0x600 [ 1183.320416][T24231] ? __mutex_unlock_slowpath+0x12d/0x580 [ 1183.326038][T24231] kernfs_new_node+0x95/0x160 [ 1183.330714][T24231] __kernfs_create_file+0x45/0x2d0 [ 1183.335812][T24231] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1183.341166][T24231] internal_create_group+0x445/0xd20 [ 1183.346442][T24231] ? up_write+0xe9/0x450 [ 1183.350754][T24231] loop_set_fd+0xf9a/0x14e0 [ 1183.355296][T24231] lo_ioctl+0xc4/0x2140 [ 1183.359477][T24231] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1183.365100][T24231] ? kfree+0x141/0x220 [ 1183.369151][T24231] ? rcu_lock_release+0x5/0x20 [ 1183.373894][T24231] ? tomoyo_path_number_perm+0x58f/0x690 [ 1183.379512][T24231] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1183.385830][T24231] ? lo_release+0x1e0/0x1e0 [ 1183.390422][T24231] blkdev_ioctl+0x2a6/0x5c0 [ 1183.394910][T24231] block_ioctl+0xbc/0x100 [ 1183.399263][T24231] ? blkdev_iopoll+0xf0/0xf0 [ 1183.403829][T24231] __se_sys_ioctl+0xf9/0x160 [ 1183.408402][T24231] do_syscall_64+0xf3/0x1b0 [ 1183.412883][T24231] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1183.418965][T24231] RIP: 0033:0x45c8f7 [ 1183.422833][T24231] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1183.442410][T24231] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.452161][T24231] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1183.460236][T24231] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1183.468204][T24231] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1183.476205][T24231] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1183.484374][T24231] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1183.559971][T24231] EXT4-fs (loop1): Invalid log cluster size: 1280 13:22:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x800, 0x4) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:51 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x8000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:51 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000d0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:51 executing program 1 (fault-call:0 fault-nth:22): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:51 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000e00000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x9000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1185.711307][T24259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1185.712867][T24255] FAULT_INJECTION: forcing a failure. [ 1185.712867][T24255] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.736373][T24255] CPU: 0 PID: 24255 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1185.742774][T24266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x2, 0x400) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x70410080}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r6, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x20}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={r7, 0xc7, "21ac7e08ea7c23c954e1027708545c5170ef955ddaf32529c558808598fe0704eb2da029aa61671fc902b948674215d50d9c752c9e158a275f62934c1d56813a20057e3d836541b8d760c0d7c22e63639bfa084f67554bf42b71e590b49a5b88884ae8d9e40c7fe584b22bbc0ece5ef8ed19073c1775d90644b7bb3c9d00a5142d3894edb54e24c1ee56a9b8d8dac2c0f7f51a3c0d958be96eb554e777fec6cd93ed0c5271f2fc59b52346bc0e7e5f30c3c871b6c71d75e7bb1ae2a6541f77a4259d8b32c7547c"}, &(0x7f0000000100)=0xcf) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r8, 0x3ff}, 0x8) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140002000000b2d33fa003275bd2820d7036cb600000000000000200ffffac141400160001000000000000000014aa7b1e9ae16669a7482a5065effc05e2491f5696e6b7808e5212c3bf9cc9ccfeb664d86d1ae46799e10b53d5e54d67200ec87ca9b3388fb376b3b42f7f1343e3acd83d5f78ed5ce8a4518ccf42f26c21fc8a47f4955163a0d0a2a96326701054c4796997e3c570a617337f68ed2e93237a75805a6b62d1d40e4bfca9e50a9bb41a7a31661165a1edbe198eb12133fa8ba66d4911487806a0fa0db2"], 0x40}}, 0x0) [ 1185.745057][T24255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.745061][T24255] Call Trace: [ 1185.745077][T24255] dump_stack+0x1e9/0x30e [ 1185.745088][T24255] should_fail+0x433/0x5b0 [ 1185.745106][T24255] ? __kernfs_new_node+0x8b/0x600 [ 1185.781415][T24255] should_failslab+0x5/0x20 [ 1185.785912][T24255] kmem_cache_alloc+0x53/0x2d0 [ 1185.791021][T24255] __kernfs_new_node+0x8b/0x600 [ 1185.795907][T24255] ? kernfs_activate+0x30/0x4d0 [ 1185.800995][T24255] ? do_raw_spin_unlock+0x134/0x8d0 [ 1185.807658][T24255] ? kernfs_add_one+0x4b7/0x600 [ 1185.812780][T24255] kernfs_new_node+0x95/0x160 [ 1185.817450][T24255] __kernfs_create_file+0x45/0x2d0 [ 1185.822549][T24255] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1185.827900][T24255] internal_create_group+0x445/0xd20 [ 1185.833167][T24255] ? up_write+0xe9/0x450 [ 1185.837551][T24255] loop_set_fd+0xf9a/0x14e0 [ 1185.842073][T24255] lo_ioctl+0xc4/0x2140 [ 1185.846212][T24255] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1185.852255][T24255] ? kfree+0x141/0x220 [ 1185.856646][T24255] ? rcu_lock_release+0x5/0x20 [ 1185.861401][T24255] ? tomoyo_path_number_perm+0x58f/0x690 [ 1185.867014][T24255] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1185.872379][T24255] ? lo_release+0x1e0/0x1e0 [ 1185.876949][T24255] blkdev_ioctl+0x2a6/0x5c0 [ 1185.881457][T24255] block_ioctl+0xbc/0x100 [ 1185.885790][T24255] ? blkdev_iopoll+0xf0/0xf0 [ 1185.890368][T24255] __se_sys_ioctl+0xf9/0x160 [ 1185.895001][T24255] do_syscall_64+0xf3/0x1b0 [ 1185.899513][T24255] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1185.905380][T24255] RIP: 0033:0x45c8f7 [ 1185.909254][T24255] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1185.928845][T24255] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1185.937246][T24255] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1185.945194][T24255] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1185.953161][T24255] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 13:22:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xa000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1185.961119][T24255] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1185.969084][T24255] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xb000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1186.035410][T24255] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1186.069380][T24284] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:51 executing program 1 (fault-call:0 fault-nth:23): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x300, 0x0) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000040)={0xcc, 0x6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1186.082044][T24284] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.095577][T24284] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:52 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000e0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1186.203619][T24299] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.235866][T24299] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.257890][T24298] FAULT_INJECTION: forcing a failure. [ 1186.257890][T24298] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.270799][T24298] CPU: 0 PID: 24298 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1186.279458][T24298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.289494][T24298] Call Trace: [ 1186.292763][T24298] dump_stack+0x1e9/0x30e [ 1186.297068][T24298] should_fail+0x433/0x5b0 [ 1186.301480][T24298] ? __kernfs_new_node+0x8b/0x600 [ 1186.306492][T24298] should_failslab+0x5/0x20 [ 1186.310987][T24298] kmem_cache_alloc+0x53/0x2d0 [ 1186.315725][T24298] ? kernfs_activate+0x30/0x4d0 [ 1186.320566][T24298] __kernfs_new_node+0x8b/0x600 [ 1186.325478][T24298] ? kernfs_add_one+0x4b7/0x600 [ 1186.330411][T24298] ? __mutex_unlock_slowpath+0x12d/0x580 [ 1186.336025][T24298] kernfs_new_node+0x95/0x160 [ 1186.340765][T24298] __kernfs_create_file+0x45/0x2d0 [ 1186.345854][T24298] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1186.351234][T24298] internal_create_group+0x445/0xd20 [ 1186.356496][T24298] ? up_write+0xe9/0x450 [ 1186.360718][T24298] loop_set_fd+0xf9a/0x14e0 [ 1186.365217][T24298] lo_ioctl+0xc4/0x2140 [ 1186.369351][T24298] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1186.374961][T24298] ? kfree+0x141/0x220 [ 1186.379003][T24298] ? rcu_lock_release+0x5/0x20 [ 1186.383764][T24298] ? tomoyo_path_number_perm+0x58f/0x690 [ 1186.389377][T24298] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1186.394724][T24298] ? lo_release+0x1e0/0x1e0 [ 1186.399207][T24298] blkdev_ioctl+0x2a6/0x5c0 [ 1186.403746][T24298] block_ioctl+0xbc/0x100 [ 1186.408065][T24298] ? blkdev_iopoll+0xf0/0xf0 [ 1186.412701][T24298] __se_sys_ioctl+0xf9/0x160 [ 1186.417281][T24298] do_syscall_64+0xf3/0x1b0 [ 1186.422021][T24298] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1186.427893][T24298] RIP: 0033:0x45c8f7 [ 1186.431774][T24298] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1186.451355][T24298] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.460175][T24298] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1186.468149][T24298] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1186.476165][T24298] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1186.484117][T24298] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1186.492076][T24298] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1186.520180][T24298] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1186.606535][T24308] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1186.616351][T24308] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1186.630824][T24308] EXT4-fs (loop3): group descriptors corrupted! 13:22:54 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:54 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080001000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xc000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:22:54 executing program 1 (fault-call:0 fault-nth:24): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:54 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000100000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xd000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1188.723367][T24334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1188.735594][T24338] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xe000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000100)={0x1, 0x1, [{0x1000, 0x0, 0x7ff}]}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0xc54, 0x30, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{0x4f0, 0x1, [@m_connmark={0xb4, 0x11, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xd4b, 0xffffffffffffffff, 0x80, 0x401}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xffffffffffffffff, 0x20, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x4c99, 0x6, 0x81, 0x6}, 0x20}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x535c186f, 0xffffffff, 0x5, 0x5, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8001, 0x3, 0x7, 0x1ff}, 0x1}}]}, {0xf, 0x6, "eba3afa51717fee9903b4f"}}}, @m_mpls={0x100, 0xd, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x88, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x719d1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1000, 0xfffffffa, 0x4, 0x9, 0x7fff}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x20, 0xd2, 0x5, 0x5, 0x9}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x401, 0x0, 0x0, 0x7ff}, 0x3}}]}, {0x67, 0x6, "cf580be4bed4e0b870e4958974b2c914cdf6bea5167fb3ca780f4d76697a1e61e1612425fe04b3c102c91c4441a8d42a3ff19879de87c9611b80928d45e19f16b017cde872b3e56127f7648f0aec1096a9a7815a54d30f8cf15f719b36422536aadfcf"}}}, @m_ctinfo={0xe8, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x73e00, 0x800, 0x4, 0x8001, 0xff800000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x800, 0x4, 0x4, 0x8, 0xfffffff9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0x83, 0x6, "2990dd2e30b845a1427437b63a4be816096b32debfb3eabeff7ee03e10a0831fdf11966c8e19300828a5a64a1ffff38a78111c5d5040f052cc4ed3d7127ff5d1b92c0cd3cd2bb2137f87348eae22f1a4a87b9a6338e3663d0b7e6a222dd23e862dfca26dd68198492a1404f8bc4d4fee6b465c4ab2e80a864fb8dd4037df30"}}}, @m_ct={0xa8, 0xc, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x1f}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x78, 0x6, "a3c017039c344abe11489df747c5838fe9832ffc0a5315641e644f158c587c657d04a4a0123b61ebcdb43f658967060f4a757ce595d10df3df57dab1dc8a1ea4d37b489c837fc8f46827ef31ec4a77eeb2e5ab443bb2f7eebebc9f15b60d21d7fce8da7abac43bd6215f3136b4c68d4aa666e487"}}}, @m_skbmod={0x170, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x992}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={[], 0x33}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x101, 0x2, 0x9, 0x2}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={[], 0x42}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="cbcf8dce6acc"}]}, {0x101, 0x6, "960df05f220595078053cb105c4955d3b63f37bcc69146b552741152582cb238a9a2b0fac8e01ac843290f3eb0dcbc7f7633a6928d75edeb9787830fdec786a371a212cac804c4610dfed4c790c13ce8a46bb0f3e31f31b724407e32556f5bb017ec79929c369e96b4e2d5c49f6cb79d761b98dcdc3c3d98f4dbd4751b89fe05631a21950679ae62575559fd727dd068d9bc0f2799002ef7973043e88dfc79a2ab69a4f42d1047a1b0eb453dd436c255e8e62cf0819c6527ad545b6b1d59b929986947ed1b7e2a12de38f5744f768f31b4080d792ea26e98efa820c389391297aff2be7d4b267afd4912ccde965b5c54153f30a824cb8533bcf9a3ffbb"}}}, @m_skbmod={0x38, 0x15, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x800}]}, {0x19, 0x6, "26950b956f901a4bbaba6aea956fa0aefb7ad2abd3"}}}]}, {0x750, 0x1, [@m_nat={0x18c, 0x7, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x8bd, 0xffffffffffffffff, 0x1f, 0x2}, @empty, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x503, 0x3, 0xfffffffc, 0xeef}, @multicast2, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x80, 0x3, 0x53, 0x7}, @empty, @multicast2}}]}, {0x101, 0x6, "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"}}}, @m_ct={0xe0, 0x2, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}]}, {0xc0, 0x6, "bc7c2e9b1030941a234f2e615697442178c42c8af1dec4de38fe4196677b00d535d892d0715fa5a4acb910b6b9c99184b6a6c41169161721c98f9f9ef87230edb083a2b7628b1e35738f774210b39f1397c5f3ba2a58ea7e4cedaaec2ae0134f5a6cfec44a1c662669048bfed79a605da3f327d21246701e18b1692679a1e0d6dbe72de04a5f9ddc4c32f790122c54f69591461f38fcd814b342d64fdadeb476bd3a92bd723ee8d76308f2c95b4078c11e127255224ee57f2db16ae1"}}}, @m_nat={0x1a0, 0x1d, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x3, 0x4, 0x9, 0x8}, @private=0xa010102, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x0, 0x4, 0xb6ec}, @private=0xa010100, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x80000000, 0x10000000, 0x0, 0x4}, @empty, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x10000000, 0x7, 0x2}, @broadcast, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x7, 0x8, 0xa}, @empty, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffd2a7, 0x20, 0x0, 0x5, 0x51d}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, 0xff000000}}]}, {0xa0, 0x6, "388a51cba03f7bb46c7b0038ad5cfa4ce5a2834f4dd58268e7ba6df902dcbb686dec42fe416ef7ed64b5a3b1de4a93f35dd0069f0cdfc6658ca172ce09ad02ceb8516f47700d4643524f919e1e7eec3292c3074c858fc9b60f65cc9dbd7663194788bdb30629a26ec73419e1445e2d9ccf3800f9e0895e2cd143f8993da2a4ad4b948bbc8516cff2a957c0ca18f8484a9b500e4c91692e6bbbd2b653"}}}, @m_nat={0xf8, 0x1c, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x80, 0xffffffffffffffff, 0x401}, @remote, @multicast2, 0xffffffff, 0x1}}]}, {0xbf, 0x6, "6e14677c8914e72aca90410bd27d1cd981b5def099eb4544faae5a2de67c682df80044ad01b1191f4963b69bff383e5763546e728864308016fcb5462aee3e2184c0033faffdc4c80ef394da3dddbcdf81096dd34f8a999e3928e92dc68625db58e68b9d689cdee217195f55051649a3a1c83f31188ba42bd5c458a38e6f46f814d442533171aa174627afc449ea2a6073316b6f1b8e6725c7189b056f4558707ffba56eb7599853fc00b59859d88ee5533c13b29412dadb93f5e4"}}}, @m_connmark={0x17c, 0x1d, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf7, 0x8, 0x1, 0x8, 0x10000}, 0x87b4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x3f, 0x3, 0xcf, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000000, 0x10001, 0x20000000, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6558, 0x6, 0x8, 0xfffffff7, 0x5}, 0x5f4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe5, 0xdac, 0x2, 0x4, 0x100}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x80, 0x7, 0x7ff, 0xa17f}, 0x4}}]}, {0xb9, 0x6, "7d50a82024a304735875755666781a628d570b27e13ce721f56521dc82e822d64734729f7d08af28a33dda40795f29de6cde576446d695848ccb27077c3405dcef2c44ad7bc0ce6a0d68699c3a07a64305638d0c992779689fc257329a16742283e8143822e10f58837b9e027cd9c5d15bac3a8f978c7cb796e5dc7e50659ff3b3a7fc8ea314a823c09049cb3520851a6a5ef24883b6eaca2465489268550b6359152db29ad4d13b831bface1b06858da59134143b"}}}, @m_nat={0xcc, 0x19, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x3, 0x5, 0x7}, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x10000, 0xffffffffffffffff, 0x26, 0x4}, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x7, 0xe4d1, 0x3}, @remote, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x20, 0x9, 0x4, 0x4, 0x1}, @multicast1, @remote, 0xff000000}}]}, {0x1b, 0x6, "f3892b786f6e63a4363e5c21349ac102d1c021ea5be6e1"}}}]}]}, 0xc54}, 0x1, 0x0, 0x0, 0x80}, 0x4048890) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1188.790477][T24340] FAULT_INJECTION: forcing a failure. [ 1188.790477][T24340] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.804333][T24340] CPU: 0 PID: 24340 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1188.813029][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.823079][T24340] Call Trace: [ 1188.826370][T24340] dump_stack+0x1e9/0x30e [ 1188.830693][T24340] should_fail+0x433/0x5b0 [ 1188.835116][T24340] ? __kernfs_new_node+0x8b/0x600 [ 1188.840257][T24340] should_failslab+0x5/0x20 [ 1188.844734][T24340] kmem_cache_alloc+0x53/0x2d0 [ 1188.849569][T24340] ? kernfs_activate+0x30/0x4d0 [ 1188.854410][T24340] __kernfs_new_node+0x8b/0x600 [ 1188.859237][T24340] ? kernfs_add_one+0x4b7/0x600 [ 1188.864110][T24340] ? __mutex_unlock_slowpath+0x12d/0x580 [ 1188.869746][T24340] kernfs_new_node+0x95/0x160 [ 1188.874404][T24340] __kernfs_create_file+0x45/0x2d0 [ 1188.879516][T24340] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1188.884865][T24340] internal_create_group+0x445/0xd20 [ 1188.890146][T24340] ? up_write+0xe9/0x450 [ 1188.894362][T24340] loop_set_fd+0xf9a/0x14e0 [ 1188.898850][T24340] lo_ioctl+0xc4/0x2140 [ 1188.903055][T24340] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1188.908680][T24340] ? kfree+0x141/0x220 [ 1188.912844][T24340] ? rcu_lock_release+0x5/0x20 [ 1188.917588][T24340] ? tomoyo_path_number_perm+0x58f/0x690 [ 1188.923198][T24340] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1188.928555][T24340] ? lo_release+0x1e0/0x1e0 [ 1188.933042][T24340] blkdev_ioctl+0x2a6/0x5c0 [ 1188.937539][T24340] block_ioctl+0xbc/0x100 [ 1188.941861][T24340] ? blkdev_iopoll+0xf0/0xf0 [ 1188.946424][T24340] __se_sys_ioctl+0xf9/0x160 [ 1188.951001][T24340] do_syscall_64+0xf3/0x1b0 [ 1188.955490][T24340] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1188.961371][T24340] RIP: 0033:0x45c8f7 [ 1188.965238][T24340] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1188.984829][T24340] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1188.993305][T24340] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1189.001259][T24340] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1189.009218][T24340] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1189.017370][T24340] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1189.025346][T24340] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x10000000, 0x0, {0x8, 0x1000, 0x544}}) [ 1189.099425][T24354] EXT4-fs (loop2): invalid inodes per group: 1048704 [ 1189.099425][T24354] [ 1189.099534][T24340] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1189.114057][T24365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x11000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:55 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000110000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:57 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:22:57 executing program 1 (fault-call:0 fault-nth:25): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000ee0b210100000000000000006c67c7583193b461446feef45af40a00000045db7a645de04e384a6f4b6a9c3ffb1098e1303e7ce10d20419002bfa5c26cd13f8ec8dc61b28dd6d051d3c062cf6b68ea4949515c338c4ba7ef702e2ac200000000000000074392", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) socket(0xb, 0x6, 0x20) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r5, r3, r4}, &(0x7f0000000440)=""/233, 0xe9, &(0x7f00000002c0)={&(0x7f0000000100)={'sha384-generic\x00'}}) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r6) keyctl$unlink(0x9, r4, r6) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140002000000000000000000010000010000991bfa0f0000ffffac1414aa"], 0x40}}, 0x40d1) 13:22:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x12000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080001100000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:57 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000120000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:22:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x25000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:57 executing program 5: socket$inet(0x2, 0x800, 0x7ff) r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x20}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x2, 0x5, 0x9, r7}, 0x10) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x7a, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @empty}}, @IFA_ADDRESS={0xfffffe3f, 0x1, @ipv4={[], [], @local}}]}, 0xfffffffffffffffb}}, 0x0) [ 1191.858319][T24407] FAULT_INJECTION: forcing a failure. [ 1191.858319][T24407] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.871109][T24407] CPU: 1 PID: 24407 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1191.879778][T24407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.889957][T24407] Call Trace: [ 1191.893274][T24407] dump_stack+0x1e9/0x30e [ 1191.897599][T24407] should_fail+0x433/0x5b0 [ 1191.901993][T24407] ? __kernfs_new_node+0x8b/0x600 [ 1191.907174][T24407] should_failslab+0x5/0x20 [ 1191.911671][T24407] kmem_cache_alloc+0x53/0x2d0 [ 1191.916412][T24407] ? kernfs_activate+0x30/0x4d0 [ 1191.921235][T24407] __kernfs_new_node+0x8b/0x600 [ 1191.926073][T24407] ? kernfs_add_one+0x4b7/0x600 [ 1191.930898][T24407] ? __mutex_unlock_slowpath+0x12d/0x580 [ 1191.936528][T24407] kernfs_new_node+0x95/0x160 [ 1191.941180][T24407] __kernfs_create_file+0x45/0x2d0 [ 1191.946278][T24407] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1191.951630][T24407] internal_create_group+0x445/0xd20 [ 1191.956892][T24407] ? up_write+0xe9/0x450 [ 1191.961109][T24407] loop_set_fd+0xf9a/0x14e0 [ 1191.965600][T24407] lo_ioctl+0xc4/0x2140 [ 1191.969739][T24407] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1191.975349][T24407] ? kfree+0x141/0x220 [ 1191.979405][T24407] ? rcu_lock_release+0x5/0x20 [ 1191.984167][T24407] ? tomoyo_path_number_perm+0x58f/0x690 [ 1191.989779][T24407] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1191.995125][T24407] ? lo_release+0x1e0/0x1e0 [ 1191.999601][T24407] blkdev_ioctl+0x2a6/0x5c0 [ 1192.004078][T24407] block_ioctl+0xbc/0x100 [ 1192.008390][T24407] ? blkdev_iopoll+0xf0/0xf0 [ 1192.012958][T24407] __se_sys_ioctl+0xf9/0x160 [ 1192.017523][T24407] do_syscall_64+0xf3/0x1b0 [ 1192.022012][T24407] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1192.027894][T24407] RIP: 0033:0x45c8f7 [ 1192.031776][T24407] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.051548][T24407] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.059942][T24407] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1192.067901][T24407] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1192.075860][T24407] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1192.083822][T24407] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1192.091779][T24407] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:22:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x5c000000, 0x0, {0x8, 0x1000, 0x544}}) 13:22:58 executing program 1 (fault-call:0 fault-nth:26): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1192.117448][T24407] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1192.141396][T24419] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1192.183175][T24429] __nla_validate_parse: 1 callbacks suppressed [ 1192.183182][T24429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.201200][T24405] EXT4-fs (loop2): invalid inodes per group: 1114240 [ 1192.201200][T24405] [ 1192.213510][T24419] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 13:22:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x6e080000, 0x0, {0x8, 0x1000, 0x544}}) [ 1192.235008][T24435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.239667][T24419] EXT4-fs (loop3): group descriptors corrupted! [ 1192.259768][T24433] FAULT_INJECTION: forcing a failure. [ 1192.259768][T24433] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.274683][T24433] CPU: 1 PID: 24433 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 13:22:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r5, 0x100) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000080)={r9, 0x0, 0x20}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r9, @in={{0x2, 0x4e24, @local}}, 0x4}, &(0x7f00000000c0)=0x90) [ 1192.283456][T24433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.293513][T24433] Call Trace: [ 1192.296802][T24433] dump_stack+0x1e9/0x30e [ 1192.301121][T24433] should_fail+0x433/0x5b0 [ 1192.305548][T24433] ? __kernfs_new_node+0x8b/0x600 [ 1192.310567][T24433] should_failslab+0x5/0x20 [ 1192.315050][T24433] kmem_cache_alloc+0x53/0x2d0 [ 1192.319809][T24433] ? kernfs_activate+0x30/0x4d0 [ 1192.324658][T24433] __kernfs_new_node+0x8b/0x600 [ 1192.329508][T24433] ? kernfs_add_one+0x4b7/0x600 [ 1192.334359][T24433] ? __mutex_unlock_slowpath+0x12d/0x580 [ 1192.340086][T24433] kernfs_new_node+0x95/0x160 [ 1192.344790][T24433] __kernfs_create_file+0x45/0x2d0 [ 1192.349890][T24433] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1192.355432][T24433] internal_create_group+0x445/0xd20 [ 1192.361558][T24433] ? up_write+0xe9/0x450 [ 1192.365806][T24433] loop_set_fd+0xf9a/0x14e0 [ 1192.370290][T24433] lo_ioctl+0xc4/0x2140 [ 1192.374440][T24433] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1192.380052][T24433] ? kfree+0x141/0x220 [ 1192.384740][T24433] ? rcu_lock_release+0x5/0x20 [ 1192.389516][T24433] ? tomoyo_path_number_perm+0x58f/0x690 [ 1192.395145][T24433] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1192.400511][T24433] ? lo_release+0x1e0/0x1e0 [ 1192.404992][T24433] blkdev_ioctl+0x2a6/0x5c0 [ 1192.409490][T24433] block_ioctl+0xbc/0x100 [ 1192.413794][T24433] ? blkdev_iopoll+0xf0/0xf0 [ 1192.418367][T24433] __se_sys_ioctl+0xf9/0x160 [ 1192.422951][T24433] do_syscall_64+0xf3/0x1b0 [ 1192.427962][T24433] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1192.433843][T24433] RIP: 0033:0x45c8f7 [ 1192.437723][T24433] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1192.457322][T24433] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1192.465786][T24433] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1192.473757][T24433] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1192.481729][T24433] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1192.489691][T24433] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1192.497645][T24433] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1192.597076][T24433] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1192.610725][T24447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1192.624797][T24449] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:00 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:23:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xe7ffffff, 0x0, {0x8, 0x1000, 0x544}}) 13:23:00 executing program 1 (fault-call:0 fault-nth:27): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:00 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080001200000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:00 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000250000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r5, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="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"], 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x200, 0x0, 0x0, {0xa, 0x0, 0x13, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) prctl$PR_SET_FPEMU(0xa, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xfdfdffff, 0x0, {0x8, 0x1000, 0x544}}) 13:23:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x101000) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1194.806445][T24468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.827341][T24468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xfffffdfd, 0x0, {0x8, 0x1000, 0x544}}) [ 1194.860722][T24467] FAULT_INJECTION: forcing a failure. [ 1194.860722][T24467] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.875786][T24467] CPU: 1 PID: 24467 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1194.884738][T24467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.894818][T24467] Call Trace: [ 1194.898106][T24467] dump_stack+0x1e9/0x30e [ 1194.902433][T24467] should_fail+0x433/0x5b0 [ 1194.906879][T24467] ? __kernfs_new_node+0x8b/0x600 [ 1194.911898][T24467] should_failslab+0x5/0x20 [ 1194.916406][T24467] kmem_cache_alloc+0x53/0x2d0 [ 1194.921275][T24467] ? kernfs_activate+0x30/0x4d0 [ 1194.926257][T24467] __kernfs_new_node+0x8b/0x600 [ 1194.931105][T24467] ? kernfs_add_one+0x4b7/0x600 [ 1194.936044][T24467] ? __mutex_unlock_slowpath+0x12d/0x580 [ 1194.941654][T24467] kernfs_new_node+0x95/0x160 [ 1194.946327][T24467] __kernfs_create_file+0x45/0x2d0 [ 1194.951438][T24467] sysfs_add_file_mode_ns+0x2fe/0x3c0 [ 1194.956798][T24467] internal_create_group+0x445/0xd20 [ 1194.962074][T24467] ? up_write+0xe9/0x450 [ 1194.966292][T24467] loop_set_fd+0xf9a/0x14e0 [ 1194.970795][T24467] lo_ioctl+0xc4/0x2140 [ 1194.974928][T24467] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1194.980548][T24467] ? kfree+0x141/0x220 [ 1194.984603][T24467] ? rcu_lock_release+0x5/0x20 [ 1194.989387][T24467] ? tomoyo_path_number_perm+0x58f/0x690 [ 1194.995011][T24467] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1195.000382][T24467] ? lo_release+0x1e0/0x1e0 [ 1195.004858][T24467] blkdev_ioctl+0x2a6/0x5c0 [ 1195.009366][T24467] block_ioctl+0xbc/0x100 [ 1195.013678][T24467] ? blkdev_iopoll+0xf0/0xf0 [ 1195.018257][T24467] __se_sys_ioctl+0xf9/0x160 [ 1195.022833][T24467] do_syscall_64+0xf3/0x1b0 [ 1195.027320][T24467] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1195.033202][T24467] RIP: 0033:0x45c8f7 [ 1195.037262][T24467] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1195.056866][T24467] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.065286][T24467] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1195.073251][T24467] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1195.081217][T24467] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1195.089174][T24467] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1195.097138][T24467] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1195.124879][T24467] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:01 executing program 1 (fault-call:0 fault-nth:28): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xffffffe7, 0x0, {0x8, 0x1000, 0x544}}) [ 1195.167854][T24496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1195.196114][T24465] EXT4-fs (loop2): invalid inodes per group: 1179776 [ 1195.196114][T24465] 13:23:01 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080002500000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1195.328789][T24508] FAULT_INJECTION: forcing a failure. [ 1195.328789][T24508] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.343358][T24508] CPU: 1 PID: 24508 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1195.352045][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.362082][T24508] Call Trace: [ 1195.365354][T24508] dump_stack+0x1e9/0x30e [ 1195.369708][T24508] should_fail+0x433/0x5b0 [ 1195.374105][T24508] ? kobject_uevent_env+0x269/0x11d0 [ 1195.379397][T24508] should_failslab+0x5/0x20 [ 1195.383913][T24508] kmem_cache_alloc_trace+0x57/0x300 [ 1195.389179][T24508] ? dev_uevent_filter+0xb0/0xb0 [ 1195.394093][T24508] kobject_uevent_env+0x269/0x11d0 [ 1195.399188][T24508] loop_set_fd+0x1005/0x14e0 [ 1195.403781][T24508] lo_ioctl+0xc4/0x2140 [ 1195.407917][T24508] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1195.413698][T24508] ? kfree+0x141/0x220 [ 1195.417763][T24508] ? rcu_lock_release+0x5/0x20 [ 1195.422552][T24508] ? tomoyo_path_number_perm+0x58f/0x690 [ 1195.429127][T24508] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1195.434477][T24508] ? lo_release+0x1e0/0x1e0 [ 1195.438967][T24508] blkdev_ioctl+0x2a6/0x5c0 [ 1195.443480][T24508] block_ioctl+0xbc/0x100 [ 1195.447801][T24508] ? blkdev_iopoll+0xf0/0xf0 [ 1195.452370][T24508] __se_sys_ioctl+0xf9/0x160 [ 1195.456947][T24508] do_syscall_64+0xf3/0x1b0 [ 1195.461445][T24508] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1195.467327][T24508] RIP: 0033:0x45c8f7 [ 1195.471212][T24508] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1195.490974][T24508] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.499377][T24508] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1195.508451][T24508] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1195.516403][T24508] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1195.524377][T24508] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1195.532449][T24508] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1195.567615][T24508] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1195.587257][T24496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1195.752110][T24521] EXT4-fs (loop2): invalid inodes per group: 2424960 [ 1195.752110][T24521] 13:23:03 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 13:23:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0xffffffff, 0x0, {0x8, 0x1000, 0x544}}) 13:23:03 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000002d0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:03 executing program 1 (fault-call:0 fault-nth:29): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x5) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000000000000f34290c7252fe95b1a85509f03ca808ea46bae541f09f19bfe102812ef54d6f0df5a00696669dc765990a2103f93dd615f33ce1d66099f7fab11552f0b57cc49e574885db2a4bc05475c5dd77d7f9821f9e74b5b0683130f41c30a5ef4bb8a3941c5000fecd10ea1684af7d82f24d4eee5dcb196872105c40000000000000000", @ANYRES32=r7, @ANYBLOB="0000f015010000001800000000000100736974000c00020024d9b209", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x25dfdbfd, {0xa, 0x1, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400200001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) 13:23:03 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080005c00000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:23:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x1c, 0x1c, 0x12, &(0x7f00000003c0)="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"}) r4 = socket(0x10, 0x803, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r9, 0x5502) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1197.860989][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.875810][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.897430][T24547] FAULT_INJECTION: forcing a failure. [ 1197.897430][T24547] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.918301][T24547] CPU: 0 PID: 24547 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1197.927143][T24547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.937637][T24547] Call Trace: [ 1197.940914][T24547] dump_stack+0x1e9/0x30e [ 1197.945342][T24547] should_fail+0x433/0x5b0 [ 1197.949775][T24547] should_failslab+0x5/0x20 [ 1197.954293][T24547] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 1197.960006][T24547] ? __kmalloc_node_track_caller+0x37/0x60 [ 1197.965805][T24547] __kmalloc_node_track_caller+0x37/0x60 [ 1197.971428][T24547] ? alloc_uevent_skb+0x73/0x220 [ 1197.976342][T24547] __alloc_skb+0xde/0x4f0 [ 1197.980656][T24547] ? kobject_uevent_env+0x883/0x11d0 [ 1197.985936][T24547] alloc_uevent_skb+0x73/0x220 [ 1197.990685][T24547] kobject_uevent_env+0xbc7/0x11d0 [ 1197.995781][T24547] loop_set_fd+0x1005/0x14e0 [ 1198.000394][T24547] lo_ioctl+0xc4/0x2140 [ 1198.004534][T24547] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1198.010158][T24547] ? kfree+0x141/0x220 [ 1198.014240][T24547] ? rcu_lock_release+0x5/0x20 [ 1198.018981][T24547] ? tomoyo_path_number_perm+0x58f/0x690 [ 1198.024731][T24547] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1198.030082][T24547] ? lo_release+0x1e0/0x1e0 [ 1198.034580][T24547] blkdev_ioctl+0x2a6/0x5c0 [ 1198.039087][T24547] block_ioctl+0xbc/0x100 [ 1198.043497][T24547] ? blkdev_iopoll+0xf0/0xf0 [ 1198.048096][T24547] __se_sys_ioctl+0xf9/0x160 [ 1198.052698][T24547] do_syscall_64+0xf3/0x1b0 [ 1198.057184][T24547] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1198.063055][T24547] RIP: 0033:0x45c8f7 [ 1198.066938][T24547] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1198.087416][T24547] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1198.095847][T24547] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1198.103912][T24547] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1198.112176][T24547] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1198.120131][T24547] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1198.128099][T24547] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x2, {0x8, 0x1000, 0x544}}) [ 1198.178305][T24547] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x70bd25, 0x0, {0xa, 0x38, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r5) keyctl$reject(0x13, r4, 0xfffffffffffffff8, 0x2, r5) 13:23:04 executing program 1 (fault-call:0 fault-nth:30): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1198.270848][T24562] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:04 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000402000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1198.356733][T24562] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1198.380675][T24562] EXT4-fs (loop3): group descriptors corrupted! [ 1198.387922][T24591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1198.408380][T24591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1198.467583][T24594] FAULT_INJECTION: forcing a failure. [ 1198.467583][T24594] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.481426][T24594] CPU: 0 PID: 24594 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1198.490101][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1198.500147][T24594] Call Trace: [ 1198.503429][T24594] dump_stack+0x1e9/0x30e [ 1198.507763][T24594] should_fail+0x433/0x5b0 [ 1198.512170][T24594] should_failslab+0x5/0x20 [ 1198.516659][T24594] kmem_cache_alloc_node+0x64/0x290 [ 1198.521844][T24594] ? __alloc_skb+0x94/0x4f0 [ 1198.526321][T24594] __alloc_skb+0x94/0x4f0 [ 1198.530633][T24594] ? kobject_uevent_env+0x883/0x11d0 [ 1198.535921][T24594] alloc_uevent_skb+0x73/0x220 [ 1198.540685][T24594] kobject_uevent_env+0xbc7/0x11d0 [ 1198.545774][T24594] loop_set_fd+0x1005/0x14e0 [ 1198.550344][T24594] lo_ioctl+0xc4/0x2140 [ 1198.554487][T24594] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1198.560108][T24594] ? kfree+0x141/0x220 [ 1198.564428][T24594] ? rcu_lock_release+0x5/0x20 [ 1198.569182][T24594] ? tomoyo_path_number_perm+0x58f/0x690 [ 1198.574805][T24594] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1198.580183][T24594] ? lo_release+0x1e0/0x1e0 [ 1198.584685][T24594] blkdev_ioctl+0x2a6/0x5c0 [ 1198.589178][T24594] block_ioctl+0xbc/0x100 [ 1198.593486][T24594] ? blkdev_iopoll+0xf0/0xf0 [ 1198.598085][T24594] __se_sys_ioctl+0xf9/0x160 [ 1198.602770][T24594] do_syscall_64+0xf3/0x1b0 [ 1198.607257][T24594] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1198.613123][T24594] RIP: 0033:0x45c8f7 [ 1198.616999][T24594] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1198.636599][T24594] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1198.644999][T24594] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1198.652947][T24594] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1198.660901][T24594] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1198.669026][T24594] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1198.677013][T24594] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1198.707074][T24594] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1198.719255][T24604] EXT4-fs (loop2): invalid inodes per group: 33816704 [ 1198.719255][T24604] 13:23:06 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$cont(0x20, r3, 0x0, 0x0) 13:23:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x3, {0x8, 0x1000, 0x544}}) 13:23:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x8, "98c2b928f410ba28f4c146443ca3"}, 0x10, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0xfd, 0x3f, 0x6}, {0x3f, 0x7f, 0x7f, 0x7}, {0x1f, 0x6, 0x7, 0xa1a}, {0x588, 0x1f, 0x6, 0x4}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:06 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000480000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:06 executing program 1 (fault-call:0 fault-nth:31): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:06 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000003000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x4, {0x8, 0x1000, 0x544}}) [ 1200.885508][T24625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1200.905665][T24634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdff010000000000000000000900395414aa0000008c074d3e64c89dedfa2b3e57b103f6352983bb0843544e8a5202755373c006b6474d2dcd17dc174a690ce3ea7317c12e364a2820a5c1d9824673ae22f1eabb824a7b388b2a98bee00bc8f0faf26f381703fe8aff895ba5d86d4ea5f0e02001b2883c87d5d22f79b7487d36bd4571046eb16069382f3f9f6e1ebc2e6cec8370ab6c7a5847f268f64f8c5fed1bbb96b394ac19dc3035646d45c595eab2cf4ba6849c7c0000001a0000"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1200.934273][T24627] FAULT_INJECTION: forcing a failure. [ 1200.934273][T24627] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.949403][T24627] CPU: 1 PID: 24627 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1200.958076][T24627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.968123][T24627] Call Trace: [ 1200.971411][T24627] dump_stack+0x1e9/0x30e [ 1200.975722][T24627] should_fail+0x433/0x5b0 [ 1200.980223][T24627] should_failslab+0x5/0x20 [ 1200.984729][T24627] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 1200.990435][T24627] ? __kmalloc_node_track_caller+0x37/0x60 [ 1200.996234][T24627] __kmalloc_node_track_caller+0x37/0x60 [ 1201.001885][T24627] ? alloc_uevent_skb+0x73/0x220 [ 1201.006828][T24627] __alloc_skb+0xde/0x4f0 [ 1201.011166][T24627] ? kobject_uevent_env+0x883/0x11d0 [ 1201.016459][T24627] alloc_uevent_skb+0x73/0x220 [ 1201.021240][T24627] kobject_uevent_env+0xbc7/0x11d0 [ 1201.026347][T24627] loop_set_fd+0x1005/0x14e0 [ 1201.030985][T24627] lo_ioctl+0xc4/0x2140 [ 1201.035146][T24627] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1201.040830][T24627] ? kfree+0x141/0x220 [ 1201.044915][T24627] ? rcu_lock_release+0x5/0x20 [ 1201.049691][T24627] ? tomoyo_path_number_perm+0x58f/0x690 [ 1201.055325][T24627] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1201.060751][T24627] ? lo_release+0x1e0/0x1e0 [ 1201.065259][T24627] blkdev_ioctl+0x2a6/0x5c0 [ 1201.069766][T24627] block_ioctl+0xbc/0x100 [ 1201.074084][T24627] ? blkdev_iopoll+0xf0/0xf0 [ 1201.078658][T24627] __se_sys_ioctl+0xf9/0x160 [ 1201.083927][T24627] do_syscall_64+0xf3/0x1b0 [ 1201.088473][T24627] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1201.094435][T24627] RIP: 0033:0x45c8f7 [ 1201.098339][T24627] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1201.118488][T24627] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.127279][T24627] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1201.136027][T24627] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1201.144054][T24627] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1201.152012][T24627] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1201.160165][T24627] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x5, {0x8, 0x1000, 0x544}}) [ 1201.240972][T24627] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1201.261225][T24628] EXT4-fs (loop2): invalid inodes per group: 50331776 [ 1201.261225][T24628] [ 1201.265718][T24652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:07 executing program 1 (fault-call:0 fault-nth:32): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x6, {0x8, 0x1000, 0x544}}) [ 1201.300919][T24652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:07 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000004c0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1201.486792][T24668] FAULT_INJECTION: forcing a failure. [ 1201.486792][T24668] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.519121][T24668] CPU: 0 PID: 24668 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1201.529383][T24668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.539436][T24668] Call Trace: [ 1201.542728][T24668] dump_stack+0x1e9/0x30e [ 1201.547153][T24668] should_fail+0x433/0x5b0 [ 1201.551576][T24668] should_failslab+0x5/0x20 [ 1201.557036][T24668] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 1201.563003][T24668] ? __kmalloc_node_track_caller+0x37/0x60 [ 1201.568909][T24668] __kmalloc_node_track_caller+0x37/0x60 [ 1201.574550][T24668] ? alloc_uevent_skb+0x73/0x220 [ 1201.579489][T24668] __alloc_skb+0xde/0x4f0 [ 1201.583847][T24668] ? kobject_uevent_env+0x883/0x11d0 [ 1201.590115][T24668] alloc_uevent_skb+0x73/0x220 [ 1201.594884][T24668] kobject_uevent_env+0xbc7/0x11d0 [ 1201.600010][T24668] loop_set_fd+0x1005/0x14e0 [ 1201.604703][T24668] lo_ioctl+0xc4/0x2140 [ 1201.608888][T24668] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1201.614528][T24668] ? kfree+0x141/0x220 [ 1201.618601][T24668] ? rcu_lock_release+0x5/0x20 [ 1201.623370][T24668] ? tomoyo_path_number_perm+0x58f/0x690 [ 1201.629053][T24668] ? blkdev_common_ioctl+0xf27/0x1b00 [ 1201.635470][T24668] ? lo_release+0x1e0/0x1e0 [ 1201.639977][T24668] blkdev_ioctl+0x2a6/0x5c0 [ 1201.644492][T24668] block_ioctl+0xbc/0x100 [ 1201.649088][T24668] ? blkdev_iopoll+0xf0/0xf0 [ 1201.653801][T24668] __se_sys_ioctl+0xf9/0x160 [ 1201.658389][T24668] do_syscall_64+0xf3/0x1b0 [ 1201.662916][T24668] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1201.668842][T24668] RIP: 0033:0x45c8f7 [ 1201.672729][T24668] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1201.692328][T24668] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.700736][T24668] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045c8f7 [ 1201.708704][T24668] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1201.716695][T24668] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1201.724666][T24668] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1201.732668][T24668] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1202.014190][T24668] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1202.139114][T24676] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1202.156352][T24676] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1202.177373][T24676] EXT4-fs (loop3): group descriptors corrupted! 13:23:09 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$cont(0x20, r3, 0x0, 0x0) 13:23:09 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000204000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x8, 0x1000, 0x544}}) 13:23:09 executing program 1 (fault-call:0 fault-nth:33): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:09 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000005c0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x8, {0x8, 0x1000, 0x544}}) [ 1203.992114][T24706] FAULT_INJECTION: forcing a failure. [ 1203.992114][T24706] name failslab, interval 1, probability 0, space 0, times 0 13:23:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x9, {0x8, 0x1000, 0x544}}) [ 1204.067125][T24706] CPU: 1 PID: 24706 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1204.075839][T24706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.086108][T24706] Call Trace: [ 1204.089448][T24706] dump_stack+0x1e9/0x30e [ 1204.093756][T24706] should_fail+0x433/0x5b0 [ 1204.098150][T24706] ? __d_alloc+0x2a/0x6d0 [ 1204.102455][T24706] should_failslab+0x5/0x20 [ 1204.106936][T24706] kmem_cache_alloc+0x53/0x2d0 [ 1204.111681][T24706] __d_alloc+0x2a/0x6d0 [ 1204.115844][T24706] ? read_seqbegin+0x122/0x1c0 [ 1204.120595][T24706] d_alloc+0x48/0x1d0 [ 1204.124559][T24706] __lookup_hash+0xc8/0x240 [ 1204.129063][T24706] filename_create+0x14b/0x630 [ 1204.133904][T24706] do_mkdirat+0x56/0x310 [ 1204.138146][T24706] do_syscall_64+0xf3/0x1b0 [ 1204.142631][T24706] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1204.148676][T24706] RIP: 0033:0x45bea7 [ 1204.152572][T24706] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.172363][T24706] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1204.180761][T24706] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1204.188892][T24706] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1204.196854][T24706] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1204.205053][T24706] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1204.213081][T24706] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1204.236487][T24705] EXT4-fs (loop2): invalid inodes per group: 67240064 [ 1204.236487][T24705] 13:23:10 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000600000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xa, {0x8, 0x1000, 0x544}}) 13:23:10 executing program 1 (fault-call:0 fault-nth:34): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000604000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xb, {0x8, 0x1000, 0x544}}) [ 1204.563910][T24752] FAULT_INJECTION: forcing a failure. [ 1204.563910][T24752] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.579992][T24742] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1204.588698][T24752] CPU: 1 PID: 24752 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1204.598392][T24752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.600024][T24742] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1204.608440][T24752] Call Trace: [ 1204.608458][T24752] dump_stack+0x1e9/0x30e [ 1204.608470][T24752] should_fail+0x433/0x5b0 [ 1204.608481][T24752] ? getname_flags+0xb8/0x610 [ 1204.608490][T24752] should_failslab+0x5/0x20 [ 1204.608499][T24752] kmem_cache_alloc+0x53/0x2d0 [ 1204.608508][T24752] getname_flags+0xb8/0x610 [ 1204.608523][T24752] do_mkdirat+0x3a/0x310 [ 1204.622645][T24742] EXT4-fs (loop3): group descriptors corrupted! [ 1204.626258][T24752] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1204.626269][T24752] ? do_syscall_64+0x19/0x1b0 [ 1204.626279][T24752] do_syscall_64+0xf3/0x1b0 [ 1204.626291][T24752] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1204.626302][T24752] RIP: 0033:0x45bea7 [ 1204.683940][T24752] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.704582][T24752] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1204.712981][T24752] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1204.720931][T24752] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1204.728897][T24752] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1204.737120][T24752] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1204.745078][T24752] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1204.839031][T24765] EXT4-fs (loop2): invalid inodes per group: 67502208 [ 1204.839031][T24765] 13:23:12 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$cont(0x20, r3, 0x0, 0x0) 13:23:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xc, {0x8, 0x1000, 0x544}}) 13:23:12 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000680000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:12 executing program 1 (fault-call:0 fault-nth:35): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:12 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000005000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xd, {0x8, 0x1000, 0x544}}) [ 1206.980998][T24791] FAULT_INJECTION: forcing a failure. [ 1206.980998][T24791] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.998344][T24791] CPU: 0 PID: 24791 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1207.007047][T24791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.017102][T24791] Call Trace: [ 1207.020397][T24791] dump_stack+0x1e9/0x30e [ 1207.024851][T24791] should_fail+0x433/0x5b0 [ 1207.029270][T24791] ? getname_flags+0xb8/0x610 [ 1207.033941][T24791] should_failslab+0x5/0x20 [ 1207.039398][T24791] kmem_cache_alloc+0x53/0x2d0 [ 1207.044162][T24791] getname_flags+0xb8/0x610 [ 1207.048666][T24791] do_mkdirat+0x3a/0x310 [ 1207.052909][T24791] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1207.058540][T24791] ? do_syscall_64+0x19/0x1b0 [ 1207.063236][T24791] do_syscall_64+0xf3/0x1b0 [ 1207.067745][T24791] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1207.073817][T24791] RIP: 0033:0x45bea7 [ 1207.077709][T24791] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1207.097313][T24791] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1207.105730][T24791] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1207.113706][T24791] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1207.121686][T24791] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 13:23:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xe, {0x8, 0x1000, 0x544}}) [ 1207.129670][T24791] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1207.137641][T24791] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:13 executing program 1 (fault-call:0 fault-nth:36): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1207.258733][T24808] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1207.313283][T24808] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 13:23:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x10, {0x8, 0x1000, 0x544}}) 13:23:13 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000006000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1207.355089][T24808] EXT4-fs (loop3): group descriptors corrupted! [ 1207.432246][T24824] FAULT_INJECTION: forcing a failure. [ 1207.432246][T24824] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.453399][T24824] CPU: 0 PID: 24824 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1207.462109][T24824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.472165][T24824] Call Trace: [ 1207.475461][T24824] dump_stack+0x1e9/0x30e [ 1207.479790][T24824] should_fail+0x433/0x5b0 [ 1207.484209][T24824] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1207.489925][T24824] should_failslab+0x5/0x20 [ 1207.494425][T24824] __kmalloc+0x74/0x330 [ 1207.498583][T24824] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1207.504305][T24824] tomoyo_realpath_from_path+0xd8/0x630 [ 1207.509863][T24824] tomoyo_path_number_perm+0x18f/0x690 [ 1207.515422][T24824] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1207.521052][T24824] ? kmem_cache_free+0xbe/0xf0 [ 1207.525811][T24824] ? filename_create+0x3c9/0x630 [ 1207.530744][T24824] ? filename_create+0x3c9/0x630 [ 1207.535682][T24824] tomoyo_path_mkdir+0x98/0xc0 [ 1207.540453][T24824] security_path_mkdir+0xd5/0x160 [ 1207.545514][T24824] do_mkdirat+0x14e/0x310 [ 1207.549846][T24824] do_syscall_64+0xf3/0x1b0 [ 1207.554353][T24824] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1207.560250][T24824] RIP: 0033:0x45bea7 13:23:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x11, {0x8, 0x1000, 0x544}}) [ 1207.564175][T24824] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1207.583775][T24824] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1207.592187][T24824] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1207.600249][T24824] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1207.608222][T24824] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1207.616197][T24824] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1207.624171][T24824] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:13 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000006c0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1207.647038][T24824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1207.672727][T24824] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1207.872983][T24849] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1207.923345][T24849] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1207.969780][T24849] EXT4-fs (loop3): group descriptors corrupted! 13:23:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40ff950d2f0066cc68b0b3515c451d1a2103000000000070422580000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = fcntl$dupfd(r8, 0x0, r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000003c0)={0x7, 'wg0\x00', {0x3}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000080)="4adc5aae1d9e700843e8d90598f8b03c746fd27fadcbfbd406746a92a21c02a44d8b17691528f500cd047449643723334bf2eca3a88f395784994e79da2407e10fa324513fe2ff2b1609e5afebed080628438a6caac648635495693febe3fa3ea4354bb95eeba248544bd47adc0d2db5658b27a53484a53d49d4bf6d73156434ee36fb6a14c1cf354e7a79d1f49e668850163caf96a115ed", 0x98, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000340)={r10}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="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"], 0x40}}, 0x0) 13:23:15 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) 13:23:15 executing program 1 (fault-call:0 fault-nth:37): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:15 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000406000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:15 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000740000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x12, {0x8, 0x1000, 0x544}}) 13:23:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdbfff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x25, {0x8, 0x1000, 0x544}}) [ 1210.019582][T24877] FAULT_INJECTION: forcing a failure. [ 1210.019582][T24877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1210.032832][T24877] CPU: 0 PID: 24877 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1210.041522][T24877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.044307][T24891] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1210.051599][T24877] Call Trace: [ 1210.051618][T24877] dump_stack+0x1e9/0x30e [ 1210.051630][T24877] should_fail+0x433/0x5b0 [ 1210.051642][T24877] prepare_alloc_pages+0x28c/0x4a0 [ 1210.051654][T24877] __alloc_pages_nodemask+0xbc/0x5e0 [ 1210.051668][T24877] kmem_getpages+0x49/0x900 [ 1210.051680][T24877] cache_grow_begin+0x7b/0x2e0 [ 1210.051691][T24877] cache_alloc_refill+0x359/0x3f0 [ 1210.051708][T24877] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1210.090467][T24891] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1210.092545][T24877] ? check_preemption_disabled+0xb0/0x240 [ 1210.092556][T24877] ? debug_smp_processor_id+0x5/0x20 [ 1210.092567][T24877] __kmalloc+0x30c/0x330 [ 1210.092582][T24877] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1210.133494][T24877] tomoyo_realpath_from_path+0xd8/0x630 [ 1210.139071][T24877] tomoyo_path_number_perm+0x18f/0x690 [ 1210.144573][T24877] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1210.150367][T24877] ? kmem_cache_free+0xbe/0xf0 [ 1210.155226][T24877] ? filename_create+0x3c9/0x630 [ 1210.160167][T24877] ? filename_create+0x3c9/0x630 [ 1210.165115][T24877] tomoyo_path_mkdir+0x98/0xc0 13:23:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x5c, {0x8, 0x1000, 0x544}}) 13:23:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KDDELIO(r4, 0x4b35, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x3e, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x90) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140002000000001f000000000200ffffac141400140001000100000000000000087670ffffac1414"], 0x40}}, 0x0) 13:23:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xe7, {0x8, 0x1000, 0x544}}) 13:23:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x300, {0x8, 0x1000, 0x544}}) [ 1210.170016][T24877] security_path_mkdir+0xd5/0x160 [ 1210.175044][T24877] do_mkdirat+0x14e/0x310 [ 1210.179407][T24877] do_syscall_64+0xf3/0x1b0 [ 1210.183912][T24877] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1210.189800][T24877] RIP: 0033:0x45bea7 [ 1210.193693][T24877] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:23:16 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a30304000c0002000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast2}}]}, 0x40}}, 0x0) [ 1210.213297][T24877] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1210.221708][T24877] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1210.229687][T24877] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1210.237960][T24877] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1210.241934][T24903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1210.245927][T24877] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1210.245933][T24877] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1210.293297][T24906] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1210.329326][T24877] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1210.337622][T24871] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1210.350230][T24904] EXT4-fs (loop2): invalid inodes per group: 100925568 [ 1210.350230][T24904] [ 1210.361020][T24871] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1210.373407][T24871] EXT4-fs (loop3): group descriptors corrupted! 13:23:18 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) 13:23:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x500, {0x8, 0x1000, 0x544}}) 13:23:18 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) r11 = pidfd_getfd(r6, r7, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f0000000000)=0x8001, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ff0da06af9eb3b6ee6e281ffac1414001400010000000000000000000000ffffac1414aa", @ANYRES64, @ANYRES64=r11], 0x40}}, 0x0) 13:23:18 executing program 1 (fault-call:0 fault-nth:38): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:18 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000007000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:18 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000007a0000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x600, {0x8, 0x1000, 0x544}}) [ 1213.024828][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1213.054998][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x700, {0x8, 0x1000, 0x544}}) [ 1213.067533][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1213.075091][T24931] FAULT_INJECTION: forcing a failure. [ 1213.075091][T24931] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.110441][T24931] CPU: 0 PID: 24931 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1213.119145][T24931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.129305][T24931] Call Trace: [ 1213.132593][T24931] dump_stack+0x1e9/0x30e [ 1213.136921][T24931] should_fail+0x433/0x5b0 [ 1213.141336][T24931] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1213.147318][T24931] should_failslab+0x5/0x20 [ 1213.151824][T24931] __kmalloc+0x74/0x330 [ 1213.155958][T24931] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1213.161656][T24931] tomoyo_realpath_from_path+0xd8/0x630 [ 1213.167282][T24931] tomoyo_path_number_perm+0x18f/0x690 [ 1213.172837][T24931] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1213.178448][T24931] ? kmem_cache_free+0xbe/0xf0 [ 1213.183195][T24931] ? filename_create+0x3c9/0x630 [ 1213.188209][T24931] ? filename_create+0x3c9/0x630 [ 1213.193204][T24931] tomoyo_path_mkdir+0x98/0xc0 [ 1213.197967][T24931] security_path_mkdir+0xd5/0x160 [ 1213.203131][T24931] do_mkdirat+0x14e/0x310 [ 1213.207456][T24931] do_syscall_64+0xf3/0x1b0 [ 1213.211951][T24931] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1213.217843][T24931] RIP: 0033:0x45bea7 [ 1213.221717][T24931] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1213.241437][T24931] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1213.249955][T24931] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1213.257913][T24931] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1213.265883][T24931] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1213.273951][T24931] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1213.281913][T24931] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x86e, {0x8, 0x1000, 0x544}}) 13:23:19 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0xcd6, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000003c0)="c0450246c640c51020449bbee258c61b69ae0eb9fc5d59eff5ae775943e2b756016ec01c8774dd3a58feac7cb61b4c69a15cdc26f96432d73a2ad363a5c99236e81aa73cff385e95d4e70086901efad11813f6e8459efbc04564cfa47b56") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1213.324883][T24931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1213.339688][T24956] EXT4-fs (loop2): invalid inodes per group: 117440640 [ 1213.339688][T24956] [ 1213.384659][T24931] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1213.387259][T24970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1213.414512][T24970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1213.424820][T24939] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x900, {0x8, 0x1000, 0x544}}) 13:23:19 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000009000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1213.443720][T24939] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1213.463517][T24939] EXT4-fs (loop3): group descriptors corrupted! [ 1213.697309][T24988] EXT4-fs (loop2): invalid inodes per group: 150995072 [ 1213.697309][T24988] 13:23:21 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) 13:23:21 executing program 1 (fault-call:0 fault-nth:39): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xa00, {0x8, 0x1000, 0x544}}) 13:23:21 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000480100000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:21 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000a000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:21 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffc) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000080)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x55, 0x6, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004008}, 0x8800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r10, @ANYBLOB="1400190000000000000000020200ffffac1494001400010000000000000000000060ffffac1014aa280256c6a4a7e8a6ed18fe3bb515d1b5d72635370f473f18cffefcaecfb37905d68a750af8a2e47ecd69c4ca818266d76079a20e132248f42f97"], 0x40}}, 0x0) 13:23:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xb00, {0x8, 0x1000, 0x544}}) [ 1216.118150][T25019] FAULT_INJECTION: forcing a failure. [ 1216.118150][T25019] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.139391][T25019] CPU: 0 PID: 25019 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1216.148211][T25019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.158267][T25019] Call Trace: [ 1216.161571][T25019] dump_stack+0x1e9/0x30e [ 1216.165915][T25019] should_fail+0x433/0x5b0 [ 1216.170328][T25019] ? security_inode_alloc+0x32/0x1e0 [ 1216.175606][T25019] should_failslab+0x5/0x20 [ 1216.180115][T25019] kmem_cache_alloc+0x53/0x2d0 [ 1216.184875][T25019] security_inode_alloc+0x32/0x1e0 [ 1216.189964][T25019] inode_init_always+0x3f4/0xa50 [ 1216.194896][T25019] ? set_qf_name+0x3d0/0x3d0 [ 1216.199478][T25019] new_inode_pseudo+0x7b/0x240 [ 1216.204218][T25019] new_inode+0x25/0x1d0 [ 1216.208380][T25019] __ext4_new_inode+0x5a5/0x5a00 [ 1216.213305][T25019] ? rcu_lock_release+0x5/0x20 [ 1216.218046][T25019] ? smk_access+0x17e/0x4a0 [ 1216.222539][T25019] ext4_mkdir+0x3bf/0x1460 [ 1216.226949][T25019] ? smack_inode_permission+0x241/0x2b0 [ 1216.232484][T25019] vfs_mkdir+0x42a/0x620 [ 1216.236726][T25019] do_mkdirat+0x1b9/0x310 [ 1216.241045][T25019] do_syscall_64+0xf3/0x1b0 [ 1216.245612][T25019] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1216.251498][T25019] RIP: 0033:0x45bea7 [ 1216.255367][T25019] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1216.275174][T25019] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1216.283570][T25019] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1216.291539][T25019] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1216.299501][T25019] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1216.307472][T25019] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 13:23:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xc00, {0x8, 0x1000, 0x544}}) [ 1216.315434][T25019] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x24, 0x32, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x20}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:22 executing program 1 (fault-call:0 fault-nth:40): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1216.429029][T25013] EXT4-fs (loop2): invalid inodes per group: 167772288 [ 1216.429029][T25013] [ 1216.443175][T25034] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xd00, {0x8, 0x1000, 0x544}}) [ 1216.469537][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1216.471796][T25034] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1216.493834][T25034] EXT4-fs (loop3): group descriptors corrupted! 13:23:22 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000b000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1216.569729][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1216.570978][T25052] FAULT_INJECTION: forcing a failure. [ 1216.570978][T25052] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.605400][T25052] CPU: 1 PID: 25052 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1216.614221][T25052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.624269][T25052] Call Trace: [ 1216.627544][T25052] dump_stack+0x1e9/0x30e [ 1216.631961][T25052] should_fail+0x433/0x5b0 [ 1216.636543][T25052] ? tomoyo_encode2+0x25a/0x560 [ 1216.641429][T25052] should_failslab+0x5/0x20 [ 1216.645932][T25052] __kmalloc+0x74/0x330 [ 1216.650073][T25052] tomoyo_encode2+0x25a/0x560 [ 1216.654732][T25052] tomoyo_realpath_from_path+0x5d6/0x630 [ 1216.660345][T25052] tomoyo_path_number_perm+0x18f/0x690 [ 1216.665791][T25052] ? trace_irq_enable_rcuidle+0x1f/0x1d0 [ 1216.671406][T25052] ? kmem_cache_free+0xbe/0xf0 [ 1216.676178][T25052] ? filename_create+0x3c9/0x630 [ 1216.681092][T25052] ? filename_create+0x3c9/0x630 [ 1216.686022][T25052] tomoyo_path_mkdir+0x98/0xc0 [ 1216.690775][T25052] security_path_mkdir+0xd5/0x160 [ 1216.696920][T25052] do_mkdirat+0x14e/0x310 [ 1216.701229][T25052] do_syscall_64+0xf3/0x1b0 [ 1216.705708][T25052] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1216.711598][T25052] RIP: 0033:0x45bea7 [ 1216.715475][T25052] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1216.736449][T25052] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1216.744900][T25052] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1216.752851][T25052] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1216.760824][T25052] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1216.768788][T25052] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1216.776736][T25052] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1216.786876][T25052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1216.858603][T25052] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1216.925419][T25066] EXT4-fs (loop2): invalid inodes per group: 184549504 [ 1216.925419][T25066] 13:23:24 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 13:23:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xe00, {0x8, 0x1000, 0x544}}) 13:23:24 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000040200000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:24 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000003c0)={0x8, 0x9, 0x4, 0x20, 0x7, {}, {0x4, 0xc, 0x7, 0xff, 0x2, 0x5, "50831973"}, 0x4, 0x0, @planes=&(0x7f00000000c0)={0x0, 0x3, @mem_offset=0x88a, 0x2}, 0x3, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x27420800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x84, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "df83fdba7caf5e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5065bffa3bff652a46bc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c4361e607b8305cea6ca347a3f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x840}, 0x40) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x3, 0x0, [{0x1000, 0x1, 0x0, 0x0, @msi={0x9, 0x2, 0x2}}, {0x7f, 0x3, 0x0, 0x0, @irqchip={0x1}}, {0x9, 0x1, 0x0, 0x0, @msi={0x9, 0xc318, 0x2, 0x2}}]}) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:24 executing program 1 (fault-call:0 fault-nth:41): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:24 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000c000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x1100, {0x8, 0x1000, 0x544}}) [ 1219.163866][T25092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.190535][T25100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.191672][T25093] FAULT_INJECTION: forcing a failure. [ 1219.191672][T25093] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.214449][T25093] CPU: 0 PID: 25093 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1219.223136][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.233191][T25093] Call Trace: [ 1219.236483][T25093] dump_stack+0x1e9/0x30e [ 1219.240802][T25093] should_fail+0x433/0x5b0 [ 1219.245197][T25093] ? ext4_alloc_inode+0x1b/0x500 [ 1219.250125][T25093] should_failslab+0x5/0x20 [ 1219.254633][T25093] kmem_cache_alloc+0x53/0x2d0 [ 1219.259414][T25093] ? set_qf_name+0x3d0/0x3d0 [ 1219.263983][T25093] ext4_alloc_inode+0x1b/0x500 [ 1219.268733][T25093] ? set_qf_name+0x3d0/0x3d0 [ 1219.273323][T25093] new_inode_pseudo+0x64/0x240 [ 1219.278165][T25093] new_inode+0x25/0x1d0 [ 1219.282302][T25093] __ext4_new_inode+0x5a5/0x5a00 [ 1219.287279][T25093] ? rcu_lock_release+0x5/0x20 [ 1219.292085][T25093] ? smk_access+0x17e/0x4a0 [ 1219.296588][T25093] ext4_mkdir+0x3bf/0x1460 [ 1219.301022][T25093] ? smack_inode_permission+0x241/0x2b0 [ 1219.306568][T25093] vfs_mkdir+0x42a/0x620 [ 1219.310795][T25093] do_mkdirat+0x1b9/0x310 [ 1219.316332][T25093] do_syscall_64+0xf3/0x1b0 [ 1219.320899][T25093] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1219.326769][T25093] RIP: 0033:0x45bea7 [ 1219.330669][T25093] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1219.350351][T25093] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 13:23:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x1200, {0x8, 0x1000, 0x544}}) 13:23:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000040)={0x3, 0x1, [0x0, 0x8000, 0x0, 0x8001], 0x4}) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/67, 0x43, 0x40000000, &(0x7f0000000440)=@rc={0x1f, @none, 0x7f}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1219.359696][T25093] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1219.367654][T25093] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1219.375716][T25093] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1219.383703][T25093] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1219.391681][T25093] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:25 executing program 1 (fault-call:0 fault-nth:42): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1219.476473][T25086] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1219.500955][T25106] EXT4-fs (loop2): invalid inodes per group: 201326720 [ 1219.500955][T25106] [ 1219.507518][T25114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x2500, {0x8, 0x1000, 0x544}}) [ 1219.524069][T25086] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1219.531160][T25116] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.540482][T25086] EXT4-fs (loop3): group descriptors corrupted! 13:23:25 executing program 5: socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRESDEC=r1, @ANYBLOB="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"], 0x40}}, 0x20004010) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x8, 0x0, 0x0, {0xa, 0x80, 0x46, 0xff, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0x0) [ 1219.619178][T25118] FAULT_INJECTION: forcing a failure. [ 1219.619178][T25118] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.636125][T25118] CPU: 1 PID: 25118 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1219.645967][T25118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.656196][T25118] Call Trace: [ 1219.659490][T25118] dump_stack+0x1e9/0x30e [ 1219.663821][T25118] should_fail+0x433/0x5b0 [ 1219.664094][T25129] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1219.668232][T25118] ? smack_inode_init_security+0x3b9/0x470 [ 1219.668243][T25118] should_failslab+0x5/0x20 [ 1219.668253][T25118] __kmalloc_track_caller+0x72/0x320 [ 1219.668263][T25118] ? rcu_lock_release+0x5/0x20 [ 1219.668274][T25118] ? rcu_lock_release+0x5/0x20 [ 1219.702570][T25118] kstrdup+0x31/0x70 [ 1219.706461][T25118] smack_inode_init_security+0x3b9/0x470 [ 1219.712070][T25118] security_inode_init_security+0xf9/0x300 [ 1219.717849][T25118] ? ext4_init_security+0x40/0x40 [ 1219.722864][T25118] __ext4_new_inode+0x46c9/0x5a00 [ 1219.727870][T25118] ext4_mkdir+0x3bf/0x1460 [ 1219.732277][T25118] ? smack_inode_permission+0x241/0x2b0 [ 1219.737839][T25118] vfs_mkdir+0x42a/0x620 [ 1219.742074][T25118] do_mkdirat+0x1b9/0x310 [ 1219.746403][T25118] do_syscall_64+0xf3/0x1b0 [ 1219.750892][T25118] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1219.756775][T25118] RIP: 0033:0x45bea7 [ 1219.760642][T25118] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1219.780218][T25118] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1219.788600][T25118] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1219.796600][T25118] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1219.804548][T25118] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1219.812504][T25118] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1219.820468][T25118] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1219.959556][T25129] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:27 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000300000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:27 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 13:23:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x5c00, {0x8, 0x1000, 0x544}}) 13:23:27 executing program 1 (fault-call:0 fault-nth:43): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:27 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000d000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="16000000", @ANYRES16=r7, @ANYBLOB="b72300000000000000000a0000f02c7c01ed0304fd480661933b51090faa03f00c218313262fa13a6407216e715455f8a2f1ce971514d5eccb40cbf523e443dd3237e6d3ed14ec566da5f207fbe17abbdf1566ebf3e914df941352e6b9471e03f9ae31c2e643a2dbd0ad579c8348c48dd51f4ce081e85812cb65cec600002ade39c34b8b566e7c01212b19cbad9b125bf44e22829e97ab94"], 0x14}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fddbdf250100000008002c002fba560308002c00030000000500350004000000080032000400000008000600", @ANYRES32=r2, @ANYBLOB="08003c000100ffff050036330100000005002f000100000005002e00000000000500370000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2bd8d94f85e9ea62) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40840000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '$)vmnet0(em1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0xd}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008880}, 0x400c811) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x6e08, {0x8, 0x1000, 0x544}}) [ 1222.181188][T25165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1222.196879][T25165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1222.222235][T25166] FAULT_INJECTION: forcing a failure. [ 1222.222235][T25166] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.235242][T25166] CPU: 0 PID: 25166 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1222.244312][T25166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1222.254399][T25166] Call Trace: [ 1222.257697][T25166] dump_stack+0x1e9/0x30e [ 1222.262036][T25166] should_fail+0x433/0x5b0 [ 1222.266455][T25166] ? __es_insert_extent+0x7a4/0x1760 13:23:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xe7ff, {0x8, 0x1000, 0x544}}) 13:23:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x88, @broadcast, 0x4e20, 0x0, 'lblc\x00', 0x24, 0x81, 0x3}, {@local, 0x4e24, 0x2000, 0x2, 0x0, 0x5}}, 0x44) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1222.271744][T25166] should_failslab+0x5/0x20 [ 1222.276249][T25166] kmem_cache_alloc+0x53/0x2d0 [ 1222.281048][T25166] __es_insert_extent+0x7a4/0x1760 [ 1222.286161][T25166] ? lock_acquire+0x169/0x480 [ 1222.290832][T25166] ? ext4_es_insert_extent+0x1c1/0x2c30 [ 1222.296383][T25166] ? do_raw_write_lock+0xf1/0x440 [ 1222.301410][T25166] ext4_es_insert_extent+0x22b/0x2c30 [ 1222.307439][T25166] ? do_raw_read_unlock+0x3e/0xf0 [ 1222.312503][T25166] ext4_ext_map_blocks+0x19a2/0x6db0 [ 1222.317913][T25166] ? lock_acquire+0x169/0x480 [ 1222.322608][T25166] ? ext4_map_blocks+0x2ad/0x1b00 [ 1222.327737][T25166] ? __down_read+0x152/0x360 [ 1222.332323][T25166] ext4_map_blocks+0x43b/0x1b00 [ 1222.337186][T25166] ? __brelse+0x54/0x90 [ 1222.341374][T25166] ext4_getblk+0xa4/0x460 [ 1222.345720][T25166] ext4_bread+0x48/0x330 [ 1222.349975][T25166] ext4_append+0x153/0x2d0 [ 1222.354552][T25166] ext4_mkdir+0x756/0x1460 [ 1222.359006][T25166] ? smack_inode_permission+0x241/0x2b0 [ 1222.364562][T25166] vfs_mkdir+0x42a/0x620 [ 1222.368804][T25166] do_mkdirat+0x1b9/0x310 [ 1222.373136][T25166] do_syscall_64+0xf3/0x1b0 [ 1222.377686][T25166] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1222.383595][T25166] RIP: 0033:0x45bea7 [ 1222.387512][T25166] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1222.407338][T25166] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 13:23:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xfdfd, {0x8, 0x1000, 0x544}}) [ 1222.416022][T25166] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1222.424014][T25166] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1222.431985][T25166] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1222.439945][T25166] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1222.447902][T25166] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xffe7, {0x8, 0x1000, 0x544}}) [ 1222.501206][T25166] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1222.510421][T25179] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1222.523702][T25180] EXT4-fs (loop2): invalid inodes per group: 218103936 [ 1222.523702][T25180] [ 1222.532141][T25193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x1000000, {0x8, 0x1000, 0x544}}) [ 1222.548953][T25179] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1222.578710][T25193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1222.580445][T25179] EXT4-fs (loop3): group descriptors corrupted! 13:23:28 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000020400000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1222.846350][T25218] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1222.856430][T25218] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1222.867574][T25218] EXT4-fs (loop3): group descriptors corrupted! 13:23:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x2000000, {0x8, 0x1000, 0x544}}) 13:23:31 executing program 1 (fault-call:0 fault-nth:44): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:31 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000e000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:31 executing program 0: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcefb0a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd36345c45249749969439ffd339708a8db36eff87d320034e4acdb77ad04e6071c248ecaba793a4f7c1b09632388cd8558c93fba010100736bb72ca1e78542e11f939f0265c314138f410e872e81fdd4b4cda8da91d1898d97c07d01828356e85c63ab08dc21aa89a38e7ce69a81944eb9", 0xe9}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 13:23:31 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000060400000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:31 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1225.258803][T25241] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1225.272616][T25241] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x3000000, {0x8, 0x1000, 0x544}}) 13:23:31 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008010300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa", @ANYRES64=r3, @ANYBLOB="7110e2be00b3beb0e0b3d4eb9aede942c4a539d489930f", @ANYRESOCT=r2], 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f00000003c0)=[0x0, 0x8d, 0x4], 0x3, 0x80000}) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1225.354878][T25248] FAULT_INJECTION: forcing a failure. [ 1225.354878][T25248] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.399189][T25248] CPU: 1 PID: 25248 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1225.404389][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1225.407895][T25248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.407899][T25248] Call Trace: [ 1225.407915][T25248] dump_stack+0x1e9/0x30e [ 1225.407927][T25248] should_fail+0x433/0x5b0 [ 1225.407937][T25248] ? kcalloc+0x2b/0x50 [ 1225.407946][T25248] should_failslab+0x5/0x20 [ 1225.407956][T25248] __kmalloc+0x74/0x330 [ 1225.407965][T25248] kcalloc+0x2b/0x50 [ 1225.407973][T25248] ext4_find_extent+0x2cb/0xcf0 [ 1225.407983][T25248] ? trace_ext4_ext_map_blocks_enter+0x29d/0x2e0 [ 1225.407993][T25248] ext4_ext_map_blocks+0x13e/0x6db0 [ 1225.408011][T25248] ? lock_acquire+0x169/0x480 [ 1225.408022][T25248] ? ext4_map_blocks+0x2ad/0x1b00 [ 1225.408035][T25248] ? __down_read+0x152/0x360 [ 1225.408045][T25248] ext4_map_blocks+0x43b/0x1b00 [ 1225.408060][T25248] ? __brelse+0x54/0x90 [ 1225.408071][T25248] ext4_getblk+0xa4/0x460 [ 1225.408084][T25248] ext4_bread+0x48/0x330 [ 1225.408096][T25248] ext4_append+0x153/0x2d0 [ 1225.408108][T25248] ext4_mkdir+0x756/0x1460 [ 1225.408120][T25248] ? smack_inode_permission+0x241/0x2b0 [ 1225.408140][T25248] vfs_mkdir+0x42a/0x620 [ 1225.522798][T25248] do_mkdirat+0x1b9/0x310 [ 1225.527107][T25248] do_syscall_64+0xf3/0x1b0 [ 1225.531584][T25248] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1225.537451][T25248] RIP: 0033:0x45bea7 [ 1225.541317][T25248] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1225.562043][T25248] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1225.570443][T25248] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1225.578407][T25248] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1225.586364][T25248] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 13:23:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x4000000, {0x8, 0x1000, 0x544}}) [ 1225.594322][T25248] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1225.602272][T25248] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1225.630833][T25248] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1225.638213][T25242] EXT4-fs (loop2): invalid inodes per group: 234881152 [ 1225.638213][T25242] 13:23:31 executing program 1 (fault-call:0 fault-nth:45): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x5000000, {0x8, 0x1000, 0x544}}) 13:23:31 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000100400000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x6000000, {0x8, 0x1000, 0x544}}) 13:23:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7000000, {0x8, 0x1000, 0x544}}) [ 1225.745652][T25273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1225.768846][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:31 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000810000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1225.867551][T25288] FAULT_INJECTION: forcing a failure. [ 1225.867551][T25288] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.880325][T25288] CPU: 1 PID: 25288 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1225.888992][T25288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.899054][T25288] Call Trace: [ 1225.902360][T25288] dump_stack+0x1e9/0x30e [ 1225.906689][T25288] should_fail+0x433/0x5b0 [ 1225.911108][T25288] ? kcalloc+0x2b/0x50 [ 1225.915176][T25288] should_failslab+0x5/0x20 [ 1225.919678][T25288] __kmalloc+0x74/0x330 [ 1225.923833][T25288] ? debug_check_no_obj_freed+0x592/0x640 [ 1225.929554][T25288] kcalloc+0x2b/0x50 [ 1225.933451][T25288] ext4_find_extent+0x2cb/0xcf0 [ 1225.938330][T25288] ? trace_ext4_ext_map_blocks_enter+0x29d/0x2e0 [ 1225.944661][T25288] ext4_ext_map_blocks+0x13e/0x6db0 [ 1225.949869][T25288] ? lock_acquire+0x169/0x480 [ 1225.954552][T25288] ? ext4_map_blocks+0x80f/0x1b00 [ 1225.959584][T25288] ext4_map_blocks+0x8d8/0x1b00 [ 1225.964436][T25288] ? __brelse+0x54/0x90 [ 1225.968582][T25288] ext4_getblk+0xa4/0x460 [ 1225.973032][T25288] ext4_bread+0x48/0x330 [ 1225.977261][T25288] ext4_append+0x153/0x2d0 [ 1225.981675][T25288] ext4_mkdir+0x756/0x1460 [ 1225.986944][T25288] ? smack_inode_permission+0x241/0x2b0 [ 1225.992468][T25288] vfs_mkdir+0x42a/0x620 [ 1225.996698][T25288] do_mkdirat+0x1b9/0x310 [ 1226.001027][T25288] do_syscall_64+0xf3/0x1b0 [ 1226.005520][T25288] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1226.011471][T25288] RIP: 0033:0x45bea7 [ 1226.015349][T25288] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.035035][T25288] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1226.043523][T25288] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1226.051487][T25288] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1226.059471][T25288] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1226.067435][T25288] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1226.075388][T25288] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1226.116929][T25293] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1226.127026][T25293] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1226.135416][T25272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1226.139569][T25293] EXT4-fs (loop3): group descriptors corrupted! 13:23:34 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000370400000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:34 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0xe63, 0x40) write$cgroup_pid(r1, &(0x7f0000000080), 0xc5) 13:23:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x8000000, {0x8, 0x1000, 0x544}}) 13:23:34 executing program 1 (fault-call:0 fault-nth:46): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:34 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000011000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x9000000, {0x8, 0x1000, 0x544}}) [ 1228.365249][T25339] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1228.391731][T25350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1228.402785][T25344] FAULT_INJECTION: forcing a failure. [ 1228.402785][T25344] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.417610][T25344] CPU: 0 PID: 25344 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1228.426298][T25344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.436819][T25344] Call Trace: [ 1228.440111][T25344] dump_stack+0x1e9/0x30e [ 1228.444529][T25344] should_fail+0x433/0x5b0 [ 1228.448946][T25344] ? ext4_mb_new_blocks+0x28b/0x1210 [ 1228.454231][T25344] should_failslab+0x5/0x20 [ 1228.458763][T25344] kmem_cache_alloc+0x53/0x2d0 13:23:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x4001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@ipv4_newroute={0x140, 0x18, 0x2, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x81, 0xfe, 0x1, 0xfd, 0x5, 0x1000}, [@RTA_METRICS={0x101, 0x8, 0x0, 0x1, "90d272e5b6601c8fa09a202c60931816c0ebe336337f2a44eaacc45593571df6102904dc51f3238797706203ee248cae2795f94b0771e674482580c250e918d2b4b3a3c8c11bb5d584a9f9913eee7b2b0b2b94a0675c1a9f9ca23d3175b0e06d4d7c7d166fbc79db4e218f768668a73b3c648bb7b84f0cf48a3c0c1b5e96a15a4ce512a6abb3cc0e08ac7ca7805d7b18926354041b4c2960c6e75d33e405f1f0589d3d2911b0f844cfb27e1701e8b378af372e69d3b3262bbeaa0f1d78bfb3ae44d968ac9aac678f6aa7f92e6f8a431f7861ee1a00cfbf21f5f5c873cca2477967b9cbce576035f804f625687a621881a76077d9b11c4d2e89ffbb27bd"}, @RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x9}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010101}, @RTA_MARK={0x8, 0x10, 0x7f9}]}, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x3, 0x17c9bb22, 0x7fff}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x7, 0xb, 0x6, 0xfffffff9, 0x1ff, 0x9, 0xffffffff, r4}, &(0x7f00000000c0)=0x20) r5 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f00000003c0)) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000029f4c07419661ec1a259cc4dc0a1ba43d68b5cbd9eae9bd6df0ae39b9dd1b07a8b1d120e541606e28ca376baf3c63021c93796bad61b7ab6402a4ac319c602d5f3e075c13a2c3e35bb3d591e985e5c86ff53306c9db4a7f01bc27008d6e786092f411f9fadaef10b103763248673fdd6fa3b000", @ANYRES32=r7, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000000500000000000000000800000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) [ 1228.463528][T25344] ext4_mb_new_blocks+0x28b/0x1210 [ 1228.468647][T25344] ext4_ext_map_blocks+0x29c9/0x6db0 [ 1228.473942][T25344] ? lock_acquire+0x169/0x480 [ 1228.478624][T25344] ? ext4_map_blocks+0x80f/0x1b00 [ 1228.483686][T25344] ext4_map_blocks+0x8d8/0x1b00 [ 1228.488535][T25344] ? __brelse+0x54/0x90 [ 1228.492694][T25344] ext4_getblk+0xa4/0x460 [ 1228.497033][T25344] ext4_bread+0x48/0x330 [ 1228.501277][T25344] ext4_append+0x153/0x2d0 [ 1228.505693][T25344] ext4_mkdir+0x756/0x1460 [ 1228.510113][T25344] ? smack_inode_permission+0x241/0x2b0 13:23:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xa000000, {0x8, 0x1000, 0x544}}) [ 1228.515660][T25344] vfs_mkdir+0x42a/0x620 [ 1228.519905][T25344] do_mkdirat+0x1b9/0x310 [ 1228.524676][T25344] do_syscall_64+0xf3/0x1b0 [ 1228.529191][T25344] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1228.535075][T25344] RIP: 0033:0x45bea7 [ 1228.538960][T25344] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1228.558571][T25344] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1228.566975][T25344] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1228.574928][T25344] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1228.582892][T25344] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1228.590971][T25344] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1228.598940][T25344] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:34 executing program 1 (fault-call:0 fault-nth:47): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1228.678788][T25340] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1228.704780][T25340] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 13:23:34 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000012000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xb000000, {0x8, 0x1000, 0x544}}) [ 1228.739877][T25340] EXT4-fs (loop3): group descriptors corrupted! [ 1228.797669][T25368] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1228.821481][T25375] FAULT_INJECTION: forcing a failure. [ 1228.821481][T25375] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.848252][T25375] CPU: 1 PID: 25375 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1228.857157][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.867233][T25375] Call Trace: [ 1228.870520][T25375] dump_stack+0x1e9/0x30e [ 1228.874837][T25375] should_fail+0x433/0x5b0 [ 1228.879229][T25375] ? smack_d_instantiate+0x684/0xd90 [ 1228.884488][T25375] should_failslab+0x5/0x20 [ 1228.888982][T25375] kmem_cache_alloc_trace+0x57/0x300 [ 1228.894246][T25375] smack_d_instantiate+0x684/0xd90 [ 1228.899340][T25375] security_d_instantiate+0xa5/0x100 [ 1228.905213][T25375] d_instantiate_new+0x61/0x110 [ 1228.910043][T25375] ext4_mkdir+0xf34/0x1460 [ 1228.914442][T25375] vfs_mkdir+0x42a/0x620 [ 1228.918675][T25375] do_mkdirat+0x1b9/0x310 [ 1228.923088][T25375] do_syscall_64+0xf3/0x1b0 [ 1228.927576][T25375] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1228.934322][T25375] RIP: 0033:0x45bea7 13:23:34 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000380400000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:34 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@broadcast, @empty=[0x14, 0x0, 0x3], @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp}}}}, 0x0) 13:23:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xc000000, {0x8, 0x1000, 0x544}}) 13:23:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001680)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e, 0x0) [ 1228.938196][T25375] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1228.958141][T25375] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1228.966547][T25375] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1228.974518][T25375] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1228.982485][T25375] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1228.990447][T25375] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1228.998398][T25375] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xd000000, {0x8, 0x1000, 0x544}}) 13:23:34 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x1261, r1) [ 1229.044327][T25375] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1229.057619][T25398] EXT4-fs (loop2): invalid inodes per group: 301990016 [ 1229.057619][T25398] 13:23:34 executing program 1 (fault-call:0 fault-nth:48): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x4, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_CACHEINFO={0x0, 0x6, {0x3, 0x89, 0x7f, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0xf25521b162c089f6}]}, 0xfffffffffffffe1c}}, 0x8090) [ 1229.115335][T25367] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xe000000, {0x8, 0x1000, 0x544}}) [ 1229.240536][T25431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.251600][T25421] FAULT_INJECTION: forcing a failure. [ 1229.251600][T25421] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.270857][T25421] CPU: 1 PID: 25421 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1229.279536][T25421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.289591][T25421] Call Trace: [ 1229.292875][T25421] dump_stack+0x1e9/0x30e [ 1229.297193][T25421] should_fail+0x433/0x5b0 [ 1229.301595][T25421] ? smack_d_instantiate+0xa59/0xd90 [ 1229.306866][T25421] should_failslab+0x5/0x20 [ 1229.311351][T25421] kmem_cache_alloc_trace+0x57/0x300 [ 1229.316645][T25421] ? smack_d_instantiate+0x97b/0xd90 [ 1229.321913][T25421] smack_d_instantiate+0xa59/0xd90 [ 1229.327011][T25421] security_d_instantiate+0xa5/0x100 [ 1229.332281][T25421] d_instantiate_new+0x61/0x110 [ 1229.337116][T25421] ext4_mkdir+0xf34/0x1460 [ 1229.341523][T25421] vfs_mkdir+0x42a/0x620 [ 1229.345748][T25421] do_mkdirat+0x1b9/0x310 [ 1229.350061][T25421] do_syscall_64+0xf3/0x1b0 [ 1229.354549][T25421] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1229.360424][T25421] RIP: 0033:0x45bea7 [ 1229.364307][T25421] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1229.383982][T25421] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1229.392373][T25421] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1229.400947][T25421] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1229.408901][T25421] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1229.416852][T25421] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1229.424804][T25421] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:35 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000025000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='M\x00'/20, @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x10000000, {0x8, 0x1000, 0x544}}) [ 1229.460341][T25431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.477485][T25423] EXT4-fs (loop3): bad geometry: first data block 1080 is beyond end of filesystem (1080) [ 1229.545071][T25421] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400212000000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) 13:23:35 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x11000000, {0x8, 0x1000, 0x544}}) 13:23:35 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000500000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:35 executing program 1 (fault-call:0 fault-nth:49): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1229.731531][T25465] EXT4-fs (loop2): invalid inodes per group: 620757120 [ 1229.731531][T25465] 13:23:35 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000003f000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x12000000, {0x8, 0x1000, 0x544}}) 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x25000000, {0x8, 0x1000, 0x544}}) [ 1229.850560][T25480] FAULT_INJECTION: forcing a failure. [ 1229.850560][T25480] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.864763][T25476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.889089][T25493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.904892][T25480] CPU: 0 PID: 25480 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1229.913580][T25480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.923658][T25480] Call Trace: [ 1229.926945][T25480] dump_stack+0x1e9/0x30e [ 1229.931269][T25480] should_fail+0x433/0x5b0 [ 1229.935685][T25480] ? smack_d_instantiate+0x8e6/0xd90 [ 1229.940966][T25480] should_failslab+0x5/0x20 [ 1229.945464][T25480] kmem_cache_alloc_trace+0x57/0x300 [ 1229.950748][T25480] smack_d_instantiate+0x8e6/0xd90 [ 1229.955859][T25480] security_d_instantiate+0xa5/0x100 [ 1229.961583][T25480] d_instantiate_new+0x61/0x110 [ 1229.966426][T25480] ext4_mkdir+0xf34/0x1460 [ 1229.970840][T25480] vfs_mkdir+0x42a/0x620 [ 1229.975104][T25480] do_mkdirat+0x1b9/0x310 [ 1229.979431][T25480] do_syscall_64+0xf3/0x1b0 [ 1229.983932][T25480] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1229.989814][T25480] RIP: 0033:0x45bea7 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x5c000000, {0x8, 0x1000, 0x544}}) [ 1229.993698][T25480] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1230.013386][T25480] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1230.021798][T25480] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1230.029795][T25480] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1230.038116][T25480] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1230.046086][T25480] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 13:23:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x8, 0x2, 0x20, 0x8}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x4, 0x0, {0xa, 0x0, 0x8, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)={0x33, 0x0, [], [@jumbo={0xc2, 0x4, 0x9061}]}, 0x10) [ 1230.054060][T25480] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x6e080000, {0x8, 0x1000, 0x544}}) [ 1230.096774][ T2638] blk_update_request: I/O error, dev loop0, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1230.108328][ T2638] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 1230.119284][T25480] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1230.131541][T25481] blk_update_request: I/O error, dev loop0, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1230.143325][T25481] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 1230.150996][T25516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xe7ffffff, {0x8, 0x1000, 0x544}}) [ 1230.200495][T25524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:36 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:36 executing program 1 (fault-call:0 fault-nth:50): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:36 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000005c000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:36 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000600000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xfdfdffff, {0x8, 0x1000, 0x544}}) 13:23:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="140002000000000000fd4a68979ed4babd6c73da77ffff01000c7a850001000000000000000000ff"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xfffffdfd, {0x8, 0x1000, 0x544}}) [ 1230.459549][T25540] FAULT_INJECTION: forcing a failure. [ 1230.459549][T25540] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.486493][T25540] CPU: 1 PID: 25540 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1230.496131][T25540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.506182][T25540] Call Trace: [ 1230.509549][T25540] dump_stack+0x1e9/0x30e [ 1230.514020][T25540] should_fail+0x433/0x5b0 [ 1230.518489][T25540] ? smack_d_instantiate+0x8e6/0xd90 [ 1230.523757][T25540] should_failslab+0x5/0x20 [ 1230.528261][T25540] kmem_cache_alloc_trace+0x57/0x300 [ 1230.533546][T25540] smack_d_instantiate+0x8e6/0xd90 [ 1230.538679][T25540] security_d_instantiate+0xa5/0x100 [ 1230.545531][T25540] d_instantiate_new+0x61/0x110 [ 1230.550379][T25540] ext4_mkdir+0xf34/0x1460 [ 1230.554801][T25540] vfs_mkdir+0x42a/0x620 [ 1230.559073][T25540] do_mkdirat+0x1b9/0x310 [ 1230.563413][T25540] do_syscall_64+0xf3/0x1b0 [ 1230.567913][T25540] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1230.573793][T25540] RIP: 0033:0x45bea7 [ 1230.578045][T25540] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1230.597964][T25540] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1230.606370][T25540] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1230.614554][T25540] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1230.623219][T25540] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1230.631177][T25540] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1230.639133][T25540] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1230.685370][T25540] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1230.693923][T25549] EXT4-fs (loop2): invalid inodes per group: 1543504000 [ 1230.693923][T25549] 13:23:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xffffffe7, {0x8, 0x1000, 0x544}}) 13:23:36 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:36 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000fdef000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1230.728395][T25564] EXT4-fs (loop3): bad geometry: first data block 1536 is beyond end of filesystem (1080) 13:23:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={&(0x7f00000003c0)=""/4096, 0x1000}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x200, 0x0, 0x0, {0xa, 0x20, 0x3b, 0x0, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13:23:36 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000040600000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0xffffffff, {0x8, 0x1000, 0x544}}) 13:23:36 executing program 1 (fault-call:0 fault-nth:51): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffa8094733564229770001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x7, 0x1000, 0x544}}) 13:23:36 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:36 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x3c) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDDISABIO(r3, 0x4b37) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400210100400022000000000a000000", @ANYRES32=r5, @ANYBLOB="1400020000200000000000000200ffffac1414001400010000000000000000000000ffffac14eb260fee7ab0dc6d9c455ce2b614aa"], 0x40}}, 0x0) [ 1231.071336][T25602] FAULT_INJECTION: forcing a failure. [ 1231.071336][T25602] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.089553][T25591] EXT4-fs (loop2): invalid inodes per group: 4026335360 [ 1231.089553][T25591] [ 1231.090298][T25602] CPU: 0 PID: 25602 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1231.099563][T25602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.099568][T25602] Call Trace: [ 1231.099589][T25602] dump_stack+0x1e9/0x30e [ 1231.099602][T25602] should_fail+0x433/0x5b0 [ 1231.099616][T25602] ? __se_sys_mount+0x7d/0x100 [ 1231.099624][T25602] should_failslab+0x5/0x20 [ 1231.099634][T25602] __kmalloc_track_caller+0x72/0x320 [ 1231.099644][T25602] ? strnlen_user+0x206/0x2c0 [ 1231.099655][T25602] strndup_user+0x73/0x150 [ 1231.099664][T25602] __se_sys_mount+0x7d/0x100 [ 1231.099677][T25602] do_syscall_64+0xf3/0x1b0 [ 1231.099690][T25602] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1231.099703][T25602] RIP: 0033:0x45f47a [ 1231.173724][T25602] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1231.193450][T25602] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1231.201857][T25602] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1231.209836][T25602] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 13:23:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x9, 0x544}}) 13:23:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0xa00, 0x544}}) [ 1231.217886][T25602] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1231.225864][T25602] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1231.233836][T25602] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1231.247576][T25606] EXT4-fs (loop3): bad geometry: first data block 1540 is beyond end of filesystem (1080) 13:23:37 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000effd000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:37 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:37 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000700000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:37 executing program 1 (fault-call:0 fault-nth:52): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1002, 0x544}}) 13:23:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) accept$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000280004002cbd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="0d0006086c0850ff03000e0006000500020400000b0001006d717072696f00000b0001006d666c7469710000"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1003, 0x544}}) 13:23:37 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000094}, 0x85) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1231.643496][T25659] FAULT_INJECTION: forcing a failure. [ 1231.643496][T25659] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.656562][T25659] CPU: 0 PID: 25659 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1231.665227][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.675275][T25659] Call Trace: [ 1231.678569][T25659] dump_stack+0x1e9/0x30e [ 1231.682905][T25659] should_fail+0x433/0x5b0 [ 1231.687336][T25659] ? smack_d_instantiate+0xa59/0xd90 13:23:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1004, 0x544}}) [ 1231.692611][T25659] should_failslab+0x5/0x20 [ 1231.697226][T25659] kmem_cache_alloc_trace+0x57/0x300 [ 1231.702521][T25659] ? smack_d_instantiate+0x97b/0xd90 [ 1231.707812][T25659] smack_d_instantiate+0xa59/0xd90 [ 1231.712927][T25659] security_d_instantiate+0xa5/0x100 [ 1231.718204][T25659] d_instantiate_new+0x61/0x110 [ 1231.723044][T25659] ext4_mkdir+0xf34/0x1460 [ 1231.727440][T25659] vfs_mkdir+0x42a/0x620 [ 1231.731682][T25659] do_mkdirat+0x1b9/0x310 [ 1231.736002][T25659] do_syscall_64+0xf3/0x1b0 [ 1231.740502][T25659] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1231.746379][T25659] RIP: 0033:0x45bea7 [ 1231.750293][T25659] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.769933][T25659] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1231.778342][T25659] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1231.786293][T25659] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1231.794498][T25659] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1231.802641][T25659] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1231.810590][T25659] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1231.933344][T25659] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1231.947991][T25677] EXT4-fs (loop2): invalid inodes per group: 4260298880 [ 1231.947991][T25677] [ 1231.958065][T25680] EXT4-fs (loop3): bad geometry: first data block 1792 is beyond end of filesystem (1080) 13:23:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1005, 0x544}}) 13:23:38 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:38 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080007ffff00000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1006, 0x544}}) 13:23:38 executing program 1 (fault-call:0 fault-nth:53): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:38 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000900000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:38 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1007, 0x544}}) [ 1232.456394][T25728] FAULT_INJECTION: forcing a failure. [ 1232.456394][T25728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1232.469645][T25728] CPU: 0 PID: 25728 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1232.478306][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.488354][T25728] Call Trace: [ 1232.491740][T25728] dump_stack+0x1e9/0x30e [ 1232.496096][T25728] should_fail+0x433/0x5b0 [ 1232.500512][T25728] ? __se_sys_mount+0x7d/0x100 [ 1232.505274][T25728] prepare_alloc_pages+0x28c/0x4a0 [ 1232.510386][T25728] __alloc_pages_nodemask+0xbc/0x5e0 [ 1232.515697][T25728] ? clear_user+0xe2/0x160 [ 1232.520113][T25728] kmem_getpages+0x49/0x900 [ 1232.524619][T25728] cache_grow_begin+0x7b/0x2e0 [ 1232.529382][T25728] cache_alloc_refill+0x359/0x3f0 [ 1232.534404][T25728] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1232.540119][T25728] ? check_preemption_disabled+0xb0/0x240 [ 1232.545842][T25728] ? debug_smp_processor_id+0x5/0x20 [ 1232.551140][T25728] ? copy_mount_options+0x5e/0x150 [ 1232.556248][T25728] kmem_cache_alloc_trace+0x2e6/0x300 [ 1232.561645][T25728] copy_mount_options+0x5e/0x150 [ 1232.566675][T25728] __se_sys_mount+0xa8/0x100 [ 1232.571394][T25728] do_syscall_64+0xf3/0x1b0 [ 1232.575900][T25728] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1232.581800][T25728] RIP: 0033:0x45f47a [ 1232.585694][T25728] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 13:23:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1008, 0x544}}) [ 1232.605296][T25728] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1232.613707][T25728] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1232.621708][T25728] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1232.629682][T25728] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1232.637687][T25728] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1232.645662][T25728] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:38 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) [ 1232.720405][T25731] EXT4-fs (loop2): invalid inodes per group: 4286513280 [ 1232.720405][T25731] [ 1232.730254][T25728] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:38 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000a00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1009, 0x544}}) 13:23:38 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:38 executing program 1 (fault-call:0 fault-nth:54): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:38 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000100006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x100a, 0x544}}) 13:23:38 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x100b, 0x544}}) [ 1233.013764][T25761] EXT4-fs (loop3): bad geometry: first data block 2560 is beyond end of filesystem (1080) [ 1233.093594][T25769] FAULT_INJECTION: forcing a failure. [ 1233.093594][T25769] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.121697][T25769] CPU: 0 PID: 25769 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1233.130399][T25769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.140972][T25769] Call Trace: [ 1233.144284][T25769] dump_stack+0x1e9/0x30e [ 1233.148627][T25769] should_fail+0x433/0x5b0 [ 1233.153063][T25769] ? smack_d_instantiate+0x8e6/0xd90 [ 1233.158362][T25769] should_failslab+0x5/0x20 [ 1233.162955][T25769] kmem_cache_alloc_trace+0x57/0x300 [ 1233.168245][T25769] smack_d_instantiate+0x8e6/0xd90 [ 1233.173366][T25769] security_d_instantiate+0xa5/0x100 [ 1233.178650][T25769] d_instantiate_new+0x61/0x110 [ 1233.183497][T25769] ext4_mkdir+0xf34/0x1460 [ 1233.187925][T25769] vfs_mkdir+0x42a/0x620 [ 1233.192176][T25769] do_mkdirat+0x1b9/0x310 [ 1233.196511][T25769] do_syscall_64+0xf3/0x1b0 [ 1233.201017][T25769] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1233.206904][T25769] RIP: 0033:0x45bea7 [ 1233.210792][T25769] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.230478][T25769] RSP: 002b:00007fef90227a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x100c, 0x544}}) [ 1233.239037][T25769] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045bea7 [ 1233.247028][T25769] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000000 [ 1233.255000][T25769] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1233.263101][T25769] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1233.271161][T25769] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1233.302117][T25769] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x100d, 0x544}}) 13:23:39 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) [ 1233.376555][T25787] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1233.398197][T25787] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1233.415340][T25787] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:23:39 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000b00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:39 executing program 1 (fault-call:0 fault-nth:55): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1233.488686][T25787] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x100e, 0x544}}) 13:23:39 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) [ 1233.612481][T25818] FAULT_INJECTION: forcing a failure. [ 1233.612481][T25818] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.626681][T25818] CPU: 0 PID: 25818 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1233.635471][T25818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.645527][T25818] Call Trace: [ 1233.648833][T25818] dump_stack+0x1e9/0x30e [ 1233.653176][T25818] should_fail+0x433/0x5b0 [ 1233.657732][T25818] ? __se_sys_mount+0x3a/0x100 [ 1233.663624][T25818] should_failslab+0x5/0x20 [ 1233.668135][T25818] __kmalloc_track_caller+0x72/0x320 [ 1233.673438][T25818] ? strnlen_user+0x206/0x2c0 [ 1233.678111][T25818] strndup_user+0x73/0x150 [ 1233.682539][T25818] __se_sys_mount+0x3a/0x100 [ 1233.687133][T25818] do_syscall_64+0xf3/0x1b0 [ 1233.692603][T25818] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1233.698588][T25818] RIP: 0033:0x45f47a [ 1233.702478][T25818] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1233.722079][T25818] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1233.730485][T25818] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1233.739081][T25818] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1233.747061][T25818] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1233.755039][T25818] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 13:23:39 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000200006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1010, 0x544}}) 13:23:39 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1011, 0x544}}) [ 1233.763012][T25818] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1233.781565][T25808] EXT4-fs (loop3): bad geometry: first data block 2816 is beyond end of filesystem (1080) 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1012, 0x544}}) 13:23:39 executing program 1 (fault-call:0 fault-nth:56): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1025, 0x544}}) 13:23:39 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000c00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:39 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, r1) [ 1234.082559][T25846] FAULT_INJECTION: forcing a failure. [ 1234.082559][T25846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1234.096960][T25846] CPU: 1 PID: 25846 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1234.105630][T25846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.115711][T25846] Call Trace: [ 1234.119110][T25846] dump_stack+0x1e9/0x30e [ 1234.123453][T25846] should_fail+0x433/0x5b0 [ 1234.127899][T25846] ? __se_sys_mount+0x7d/0x100 [ 1234.132672][T25846] prepare_alloc_pages+0x28c/0x4a0 [ 1234.137795][T25846] __alloc_pages_nodemask+0xbc/0x5e0 [ 1234.143085][T25846] ? clear_user+0xe2/0x160 [ 1234.147509][T25846] kmem_getpages+0x49/0x900 [ 1234.152021][T25846] cache_grow_begin+0x7b/0x2e0 [ 1234.157867][T25846] cache_alloc_refill+0x359/0x3f0 [ 1234.162904][T25846] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1234.168627][T25846] ? check_preemption_disabled+0xb0/0x240 [ 1234.174354][T25846] ? debug_smp_processor_id+0x5/0x20 [ 1234.179641][T25846] ? copy_mount_options+0x5e/0x150 [ 1234.184766][T25846] kmem_cache_alloc_trace+0x2e6/0x300 [ 1234.190313][T25846] copy_mount_options+0x5e/0x150 [ 1234.195271][T25846] __se_sys_mount+0xa8/0x100 [ 1234.199871][T25846] do_syscall_64+0xf3/0x1b0 [ 1234.204473][T25846] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1234.210368][T25846] RIP: 0033:0x45f47a [ 1234.214263][T25846] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1234.234036][T25846] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1234.242527][T25846] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1234.250500][T25846] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1234.258475][T25846] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1234.266570][T25846] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1234.274632][T25846] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:40 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x105c, 0x544}}) [ 1234.377377][T25852] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1234.394696][T25852] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1234.396161][T25846] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1234.404470][T25852] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:23:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x10e7, 0x544}}) [ 1234.425326][T25852] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:40 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000040200006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:40 executing program 1 (fault-call:0 fault-nth:57): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:40 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x2900, 0x544}}) [ 1234.499154][T25860] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (1080) 13:23:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x4000, 0x544}}) [ 1234.714852][T25892] FAULT_INJECTION: forcing a failure. [ 1234.714852][T25892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1234.728108][T25892] CPU: 0 PID: 25892 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1234.736878][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.746934][T25892] Call Trace: [ 1234.750236][T25892] dump_stack+0x1e9/0x30e [ 1234.754597][T25892] should_fail+0x433/0x5b0 [ 1234.759022][T25892] ? __se_sys_mount+0x7d/0x100 [ 1234.763798][T25892] prepare_alloc_pages+0x28c/0x4a0 [ 1234.768917][T25892] __alloc_pages_nodemask+0xbc/0x5e0 [ 1234.774217][T25892] ? clear_user+0xe2/0x160 [ 1234.778648][T25892] kmem_getpages+0x49/0x900 [ 1234.783153][T25892] cache_grow_begin+0x7b/0x2e0 [ 1234.787941][T25892] cache_alloc_refill+0x359/0x3f0 [ 1234.792971][T25892] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1234.798692][T25892] ? check_preemption_disabled+0xb0/0x240 [ 1234.804453][T25892] ? debug_smp_processor_id+0x5/0x20 [ 1234.809791][T25892] ? copy_mount_options+0x5e/0x150 [ 1234.814910][T25892] kmem_cache_alloc_trace+0x2e6/0x300 [ 1234.820295][T25892] copy_mount_options+0x5e/0x150 [ 1234.825243][T25892] __se_sys_mount+0xa8/0x100 [ 1234.829847][T25892] do_syscall_64+0xf3/0x1b0 [ 1234.834720][T25892] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1234.840629][T25892] RIP: 0033:0x45f47a [ 1234.844612][T25892] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 13:23:40 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) 13:23:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x4002, 0x544}}) [ 1234.864216][T25892] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1234.872781][T25892] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1234.880756][T25892] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1234.888986][T25892] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1234.896958][T25892] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1234.904968][T25892] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:40 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000d00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1234.993271][T25893] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1235.020266][T25892] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:40 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) [ 1235.050309][T25893] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:23:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x4405, 0x544}}) 13:23:40 executing program 1 (fault-call:0 fault-nth:58): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:41 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) [ 1235.127416][T25893] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1235.147014][T25893] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:41 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000300006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1235.215003][T25920] EXT4-fs (loop3): bad geometry: first data block 3328 is beyond end of filesystem (1080) 13:23:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0xb701, 0x544}}) 13:23:41 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1235.357210][T25929] FAULT_INJECTION: forcing a failure. [ 1235.357210][T25929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1235.370533][T25929] CPU: 0 PID: 25929 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1235.379247][T25929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.389307][T25929] Call Trace: [ 1235.392612][T25929] dump_stack+0x1e9/0x30e [ 1235.397036][T25929] should_fail+0x433/0x5b0 [ 1235.401464][T25929] ? __se_sys_mount+0x7d/0x100 [ 1235.406246][T25929] prepare_alloc_pages+0x28c/0x4a0 [ 1235.411382][T25929] __alloc_pages_nodemask+0xbc/0x5e0 [ 1235.416759][T25929] ? clear_user+0xe2/0x160 [ 1235.421183][T25929] kmem_getpages+0x49/0x900 [ 1235.425692][T25929] cache_grow_begin+0x7b/0x2e0 [ 1235.430464][T25929] cache_alloc_refill+0x359/0x3f0 [ 1235.435495][T25929] ? trace_irq_disable_rcuidle+0x1f/0x1d0 [ 1235.441742][T25929] ? check_preemption_disabled+0xb0/0x240 [ 1235.447460][T25929] ? debug_smp_processor_id+0x5/0x20 [ 1235.452755][T25929] ? copy_mount_options+0x5e/0x150 [ 1235.458041][T25929] kmem_cache_alloc_trace+0x2e6/0x300 [ 1235.463766][T25929] copy_mount_options+0x5e/0x150 [ 1235.469145][T25929] __se_sys_mount+0xa8/0x100 [ 1235.473741][T25929] do_syscall_64+0xf3/0x1b0 [ 1235.478256][T25929] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1235.484146][T25929] RIP: 0033:0x45f47a [ 1235.488034][T25929] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1235.507813][T25929] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1235.516518][T25929] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1235.524576][T25929] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1235.532549][T25929] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1235.540527][T25929] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1235.548497][T25929] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x2}}) 13:23:41 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:41 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000e00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1235.680493][T25929] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1235.695482][T25939] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:41 executing program 1 (fault-call:0 fault-nth:59): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x10}}) [ 1235.751954][T25939] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1235.783438][T25939] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:23:41 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x2d0}}) [ 1235.809439][T25939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:41 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000400006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:41 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1235.875243][T25964] FAULT_INJECTION: forcing a failure. [ 1235.875243][T25964] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.929559][T25964] CPU: 0 PID: 25964 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1235.938258][T25964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.948309][T25964] Call Trace: [ 1235.951607][T25964] dump_stack+0x1e9/0x30e [ 1235.955942][T25964] should_fail+0x433/0x5b0 [ 1235.960363][T25964] ? getname_flags+0xb8/0x610 [ 1235.965069][T25964] should_failslab+0x5/0x20 [ 1235.969606][T25964] kmem_cache_alloc+0x53/0x2d0 [ 1235.974486][T25964] getname_flags+0xb8/0x610 [ 1235.978992][T25964] user_path_at_empty+0x28/0x50 [ 1235.984118][T25964] do_mount+0xd1/0x2900 [ 1235.988276][T25964] ? _copy_from_user+0x116/0x170 [ 1235.993215][T25964] __se_sys_mount+0xd3/0x100 [ 1235.997817][T25964] do_syscall_64+0xf3/0x1b0 [ 1236.002501][T25964] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1236.008387][T25964] RIP: 0033:0x45f47a [ 1236.012275][T25964] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1236.031900][T25964] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1236.040308][T25964] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1236.048280][T25964] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1236.056336][T25964] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1236.064308][T25964] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1236.072278][T25964] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1236.119213][T25959] EXT4-fs (loop3): bad geometry: first data block 3584 is beyond end of filesystem (1080) 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x55e}}) 13:23:42 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:23:42 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000041000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1236.355242][T25985] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1236.399238][T25985] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x2}}) 13:23:42 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1236.451349][T25985] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1236.470623][T25985] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:42 executing program 1 (fault-call:0 fault-nth:60): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1236.587354][T26017] EXT4-fs (loop3): bad geometry: first data block 4100 is beyond end of filesystem (1080) 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x3}}) 13:23:42 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000500006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:42 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000201000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1236.788066][T26029] FAULT_INJECTION: forcing a failure. [ 1236.788066][T26029] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.814430][T26029] CPU: 1 PID: 26029 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1236.823135][T26029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.833220][T26029] Call Trace: [ 1236.836515][T26029] dump_stack+0x1e9/0x30e [ 1236.840849][T26029] should_fail+0x433/0x5b0 [ 1236.845269][T26029] ? tomoyo_realpath_from_path+0xd8/0x630 [ 1236.851007][T26029] should_failslab+0x5/0x20 [ 1236.855511][T26029] __kmalloc+0x74/0x330 [ 1236.859667][T26029] ? tomoyo_realpath_from_path+0xcb/0x630 [ 1236.865387][T26029] tomoyo_realpath_from_path+0xd8/0x630 [ 1236.870936][T26029] tomoyo_mount_permission+0x284/0x9d0 [ 1236.876392][T26029] ? debug_check_no_obj_freed+0x592/0x640 [ 1236.882115][T26029] ? trace_kmem_cache_free+0xa0/0x100 [ 1236.887486][T26029] ? filename_lookup+0x410/0x5d0 [ 1236.892426][T26029] security_sb_mount+0x70/0xd0 [ 1236.897194][T26029] do_mount+0x109/0x2900 [ 1236.901433][T26029] ? _copy_from_user+0x116/0x170 [ 1236.906392][T26029] __se_sys_mount+0xd3/0x100 [ 1236.910982][T26029] do_syscall_64+0xf3/0x1b0 [ 1236.915485][T26029] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1236.921380][T26029] RIP: 0033:0x45f47a 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x4}}) [ 1236.925306][T26029] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1236.944905][T26029] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1236.953313][T26029] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1236.961287][T26029] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1236.969284][T26029] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1236.977719][T26029] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1236.985694][T26029] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x5}}) [ 1237.013298][T26029] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1237.047512][T26047] EXT4-fs (loop3): bad geometry: first data block 4128 is beyond end of filesystem (1080) 13:23:42 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x6}}) 13:23:42 executing program 1 (fault-call:0 fault-nth:61): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:43 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x7}}) [ 1237.296649][T26073] FAULT_INJECTION: forcing a failure. [ 1237.296649][T26073] name failslab, interval 1, probability 0, space 0, times 0 13:23:43 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000600006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:43 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000001100000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:43 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1237.487428][T26073] CPU: 0 PID: 26073 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1237.496139][T26073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.506368][T26073] Call Trace: [ 1237.509659][T26073] dump_stack+0x1e9/0x30e [ 1237.515122][T26073] should_fail+0x433/0x5b0 [ 1237.519545][T26073] ? tomoyo_encode2+0x25a/0x560 [ 1237.524622][T26073] should_failslab+0x5/0x20 [ 1237.529132][T26073] __kmalloc+0x74/0x330 [ 1237.533292][T26073] tomoyo_encode2+0x25a/0x560 [ 1237.537981][T26073] tomoyo_mount_permission+0x217/0x9d0 [ 1237.543534][T26073] ? debug_check_no_obj_freed+0x592/0x640 [ 1237.549238][T26073] ? trace_kmem_cache_free+0xa0/0x100 [ 1237.554620][T26073] ? filename_lookup+0x410/0x5d0 [ 1237.559573][T26073] security_sb_mount+0x70/0xd0 [ 1237.564342][T26073] do_mount+0x109/0x2900 [ 1237.568585][T26073] ? _copy_from_user+0x116/0x170 [ 1237.573678][T26073] __se_sys_mount+0xd3/0x100 [ 1237.578272][T26073] do_syscall_64+0xf3/0x1b0 [ 1237.582783][T26073] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1237.588673][T26073] RIP: 0033:0x45f47a [ 1237.592568][T26073] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1237.612798][T26073] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1237.621215][T26073] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1237.629189][T26073] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 13:23:43 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000040600006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x8}}) [ 1237.637191][T26073] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1237.645163][T26073] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1237.653220][T26073] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 13:23:43 executing program 1 (fault-call:0 fault-nth:62): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x9}}) 13:23:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1237.880376][T26113] FAULT_INJECTION: forcing a failure. [ 1237.880376][T26113] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.911156][T26113] CPU: 0 PID: 26113 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 1237.919854][T26113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.930147][T26113] Call Trace: [ 1237.933525][T26113] dump_stack+0x1e9/0x30e [ 1237.937856][T26113] should_fail+0x433/0x5b0 [ 1237.942263][T26113] ? vfs_parse_fs_string+0xee/0x1e0 [ 1237.947467][T26113] should_failslab+0x5/0x20 [ 1237.952069][T26113] __kmalloc_track_caller+0x72/0x320 [ 1237.957381][T26113] kmemdup_nul+0x27/0xa0 [ 1237.961605][T26113] vfs_parse_fs_string+0xee/0x1e0 [ 1237.966632][T26113] do_mount+0x12f8/0x2900 [ 1237.970954][T26113] ? _copy_from_user+0x116/0x170 [ 1237.975891][T26113] __se_sys_mount+0xd3/0x100 13:23:43 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x18040, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0xd5011c01d5541455, 0x801, 0x9) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYBLOB="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", @ANYBLOB="0000f015010000001800120008000100736974000c0002000800030052bd22ad249a12a270cd27817f6b4bbae2b83bd1b6519d9299e9889442949672f9aef0b2caad2f7caec8ed20aef4d6dd4f822ff3d5fb992b392fb7d3fac6fa9fc139c8f0008ed74539966297f045cb35856cd888c642d0ca2ea0f7e555e37d4f78dba6c194524f9b5a64233b4c31a2049def1ff6b2098e53780a1b2739f507147e18e93852b2dd6a3c31385330cd", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev={0xac, 0x14, 0x14, 0x19}}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x1, @mcast2, 0x5}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000a01099a0f377bb9213b1626830eca1c5930c709f24f8d0f8567369c98f560a5c88d0769d49a55ad0c1b115d92ccc03e9ff9add566eff170dd6d6f72f93fddd816cc8ac884adc", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, &(0x7f0000000240)={0x7, 0x0, 0x0, 0x3}) 13:23:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xa}}) [ 1237.980482][T26113] do_syscall_64+0xf3/0x1b0 [ 1237.984993][T26113] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1237.990881][T26113] RIP: 0033:0x45f47a [ 1237.994775][T26113] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1238.003410][T26132] __nla_validate_parse: 10 callbacks suppressed [ 1238.003416][T26132] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.014479][T26113] RSP: 002b:00007fef90227a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1238.014488][T26113] RAX: ffffffffffffffda RBX: 00000000005088c0 RCX: 000000000045f47a [ 1238.014493][T26113] RDX: 00007fef90227ae0 RSI: 0000000020000000 RDI: 00007fef90227b00 [ 1238.014498][T26113] RBP: 000000000078bf00 R08: 00007fef90227b40 R09: 00007fef90227ae0 [ 1238.014503][T26113] R10: 0000000000004801 R11: 0000000000000206 R12: 0000000000000003 [ 1238.014508][T26113] R13: 0000000000000bea R14: 00000000004ce2a4 R15: 00007fef902286d4 [ 1238.079642][T26133] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.094854][T26132] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.105370][T26133] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:43 executing program 1 (fault-call:0 fault-nth:63): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:44 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000001200000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1238.144739][T26117] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1238.206113][T26117] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1238.243265][T26117] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1238.260896][T26117] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:44 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000700006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xb}}) 13:23:44 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) bind(r2, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="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"], 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0xc, 0x400, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xb7022db4ee12f43b) 13:23:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1238.347198][T26148] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1238.365514][T26147] EXT4-fs (loop3): bad geometry: first data block 4608 is beyond end of filesystem (1080) 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xc}}) [ 1238.435972][T26164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.462902][T26164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xd}}) 13:23:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c416"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1238.483939][T26176] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.505123][T26174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xe}}) 13:23:44 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000002000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:44 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) dup(r1) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000000)=0x507, 0x2) 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x10}}) [ 1238.685282][T26183] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1238.696759][T26205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:44 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000800006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x11}}) 13:23:44 executing program 5: r0 = socket(0x23, 0x803, 0x401) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x2, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400400001400210180000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) r8 = accept4$rose(r2, &(0x7f0000000000)=@full={0xb, @remote, @bcast, 0x0, [@netrom, @null, @rose, @bcast, @remote, @netrom]}, &(0x7f0000000040)=0x40, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRESHEX, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa", @ANYRES64], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1238.777081][T26210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.811294][T26183] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x12}}) 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x25}}) 13:23:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) [ 1238.999373][T26213] EXT4-fs (loop3): bad geometry: first data block 8192 is beyond end of filesystem (1080) [ 1239.002785][T26252] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1239.037959][T26246] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x5c}}) [ 1239.064467][T26246] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1239.088114][T26252] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1239.103889][T26246] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1239.133949][T26246] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:45 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000102000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f00000003c0)=""/4096) socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="1400022f00defffffffcffff0100ffffac14145d0c7a850001000000f40000000001002b0b000000000000028da59d10808921c18002be5b866f8cc8802828e9a8a09a2aab36bd97d53240285e756603ae2880caf73f68fe56e7faad71c8a173a7aefa216ead8198cfa98972d1c34ca8e8ca2ba9eba6d7ec6bf98e9d8e4d341150f06f398cebba480714879a58f3ad964c627c9622e08ef3617d994b5be6ac71bbca182252598e149e15000000000000000000000000000000008823245b1b7947197afdee46dd46d4a28483efedccd70ede27086ec94f972c4cdb3e7cdc"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xe7}}) 13:23:45 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000100800006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x300}}) 13:23:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x500}}) 13:23:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x600}}) [ 1239.371631][T26287] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1239.445041][T26290] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x700}}) [ 1239.504861][T26290] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1239.538665][T26287] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1239.546485][T26290] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1239.589859][T26290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1239.599016][T26293] EXT4-fs (loop3): bad geometry: first data block 8208 is beyond end of filesystem (1080) 13:23:45 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000002500000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb420c6a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="14afc05d7eaa8ea768a10533a9b0cb7ce7010000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2512000000cc00be000ee83eb31fdd2115846101a55d8be2430a2f4dc99522df50618acc77ff575f3d46a64bb49d376b0e4835d895aa936f0efe25c0f62014c3d623aee4eb4160175e8f6bf537773dc4d545ee06746a7bbc819822c036f30ac45d6e5c838a2623b6233031e33d5b00c85b4f026f9d0f6c301ee1e50e9b8c204bd57fedb4dee1b3e3ba1062359dd903a56ecbdfefb4a45da0124f134138058e505ef85dcf2e513794e740f53a39a78e8313922223a16440e03336ea1d7b8c34bab60e273a35cb1f016035c6f2fddc8386130800a400010000000600b500c307000006001a01040000000c009900d6000000000000000500c200030000000500c20007000000"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4048004) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r8, 0x0, 0x20}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r8, 0xdfa9, 0x7ff, 0x8, 0x1, 0xff}, &(0x7f0000000040)=0x14) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@ipv6_newaddr={0x5c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @broadcast}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x101, 0x400, 0x40}}, @IFA_FLAGS={0x8, 0x8, 0x23}]}, 0x5c}}, 0x0) 13:23:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000900006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x86e}}) 13:23:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x900}}) 13:23:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000000)={0x200}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) read$char_usb(r6, &(0x7f0000000080)=""/6, 0x6) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1239.841908][T26330] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1239.864132][T26336] EXT4-fs (loop3): bad geometry: first data block 9472 is beyond end of filesystem (1080) 13:23:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xa00}}) 13:23:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000140021c5a20000cb000000000000000a", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x240000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x40c4) [ 1239.900489][T26330] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1240.063720][T26366] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1240.084140][T26366] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1240.095353][T26366] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:23:45 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000002d00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 0: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) 13:23:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xb00}}) [ 1240.108249][T26366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:46 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000a00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xc00}}) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='eth1(\x00') getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:46 executing program 0: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r6}, 0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1240.265292][T26394] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1240.279596][T26390] EXT4-fs (loop3): bad geometry: first data block 11520 is beyond end of filesystem (1080) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xd00}}) 13:23:46 executing program 0: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1261, 0xffffffffffffffff) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xe00}}) [ 1240.488191][T26425] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1240.494709][T26394] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1240.518751][T26425] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:23:46 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000043700000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r5, 0x0, 0x20}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x2, 0xc2, 0x80, r5}, &(0x7f0000000040)=0x10) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) tkill(r7, 0x23) 13:23:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x1100}}) 13:23:46 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x16, 0x300, 0x70bd28, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="5ec1d49938866031f132414d52d2e6f6eff7", @generic="a6271de9ed8203ea10838ca0344330348544372f47238d8dff078f8a6a0ff2d715ff18c4169f"]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x1261, r1) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000240)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000000450419149f6fed6000008000000fd00", @ANYRES32=r5, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = syz_open_procfs(r7, &(0x7f0000000000)='syscall\x00') ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000027c0)={0xa, 0x0, [{0x6, 0x100b, &(0x7f000001ba40)=""/4107}, {0x2000, 0x26, &(0x7f0000000040)=""/38}, {0x1, 0x1000, &(0x7f00000013c0)=""/4096}, {0x3000, 0x60, &(0x7f0000000080)=""/96}, {0x4, 0x2a, &(0x7f0000000100)=""/42}, {0x3000, 0xe5, &(0x7f00000025c0)=""/229}, {0x100000, 0xd9, &(0x7f00000024c0)=""/217}, {0xd000, 0xd1, &(0x7f000001b940)=""/209}, {0x1000, 0x18ffc, &(0x7f0000002940)=""/102396}, {0x1000, 0xd8, &(0x7f00000026c0)=""/216}]}) 13:23:46 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000b00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1240.539358][T26425] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1240.555404][T26425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x1200}}) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x2500}}) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000089c90b00000000e3701f7114a1df654d0a0a38d00000000a0000ff38449747417582ee2a9f40306ea1c124e31e8083f2d22274c20a6b109e0db591a94ae5461fe7d699501441974a74fb555a708c8ebc234c615a15001b35ed5755f392b8c402b981e132f0a43d01ca0407b85bc8675b6e39fe18be6fb3e9d68c93107e4c2a27d2a8058bf46b39e3fa90c78b319d40d626e9eb97c46d98ffa4ee", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, r8, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffbff}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) socket$netlink(0x10, 0x3, 0x6) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x5c00}}) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x6e08}}) [ 1240.784284][T26469] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1240.835735][T26465] EXT4-fs (loop3): bad geometry: first data block 14084 is beyond end of filesystem (1080) [ 1240.846239][T26478] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1240.859771][T26478] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1240.870292][T26478] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1240.884809][T26478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1240.915158][T26469] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:46 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000043800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xe7ff}}) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:46 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000c00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0, 0xeffdffff}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x0) 13:23:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xfdfd}}) 13:23:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, r2, 0x31905e13403123b7, 0x0, 0x0, {0xa, 0x0, 0xf000}}, 0x14}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf251100000008003a000000000005002d000100000008000700000008002b000200000008002c000100000008003b0000020000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r4, @ANYBLOB="1400020000000000f358c363c06df6e54d00fdffff0100ffffac1414470c7a8500010000"], 0x40}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140002000000200000000000021400010000000000000000000000ffffac1414aa07ce8b2557ed06469b13743f0f3211d78d58547aa44f4a5bc6bcf2df4b5ad2a7f6005509d4"], 0x40}}, 0x0) 13:23:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xffe7}}) 13:23:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r5, 0xab03) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140021020000a4d2000000000a0052f6e24897abdef3bb24dbb209cc64752506ff1921f5723cd2856c7cd44b33ecdeac87195d0e6f1a3506677afe01a0eeb0f5c5f7b5258c763eca8d5493b19d5cad424fe1b0c2c3226cc520b28ed24da649a560f8c602c4c2ac04acedfbada3b59b6447991ab64c8a89dc317f61cbebeb620de6781f6f334ab2ac7deabc35025a6043f3359278e28c3436ff3087c258bfafc1bbf33e2465e6b3bad78735bfbc757389769667b3f38d3ab81552866c5a5d3de40b0b8e2313c71598d7231ae2643688b064190932", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1241.219421][T26525] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1241.226637][T26514] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1241.245628][T26514] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1241.257777][T26523] EXT4-fs (loop3): bad geometry: first data block 14340 is beyond end of filesystem (1080) 13:23:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x1000000}}) 13:23:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x101, 0x12) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa", @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x84c0}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40005e7dba11650fab950942abe13fa3c788001f1400210100000000000000001d009e8649c9c8e39a73c1096ab5625cf756cc5d18cce777baca625c5a3db2c1330e3ef4fb0c335c2681394c209042b6e9e7336d97a30fdfbba2b3768028d0550fe83d484c1bf6b3071a07becd3a2010609ee1375f051f879c7efd76893dfc8899d1c8a6117137", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 1241.288974][T26525] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1241.301589][T26514] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1241.404807][T26514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x9, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:23:47 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000003f00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:47 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000d00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x2000000}}) 13:23:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x3000000}}) 13:23:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x4000000}}) 13:23:47 executing program 0: socketpair(0x15, 0x5, 0x0, &(0x7f0000000300)) [ 1241.625505][T26576] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x5000000}}) [ 1241.724087][T26592] EXT4-fs (loop3): bad geometry: first data block 16128 is beyond end of filesystem (1080) [ 1241.762727][T26601] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:23:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) [ 1241.776760][T26576] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:47 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000004000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1241.821227][T26601] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1241.867963][T26601] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1241.920620][T26601] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1242.016192][T26623] EXT4-fs (loop3): bad geometry: first data block 16384 is beyond end of filesystem (1080) 13:23:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xff}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x1}}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xdf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040040) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x6000000}}) 13:23:48 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000e00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x2, 0x4000000000000800, 0x1, 0x1}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000440)="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", &(0x7f00000001c0)=""/74, &(0x7f0000001440)="cd7ce67bcf51642dcbc8c25d09cb42d43f88b0400bd6aa248c9885c2525f285d4aeec697f122b36b5681ad38eaea40b7f404f1d02e4455149c9b7c7f71d00d3291249c792412d0de7293be699932e8acca02f40875719935297b6d69cc966be516c8cedbca130d47f9524e06f8cdce30d1e89045b620612ab8c463dda2edda55eda84ea6a1202695d8cd5bac3ee94c8d17bfdfd01282946d84a6166bc6e91a1e6588f51ad11b4ad1b85aadd525035c5173703e306f4030a01ec59b1f7d6635d9378d4105238a9236ffbdeabaaf50ebeb17e4d58891264ab9badcc73ec2917a0acc4b7ad43e39fec68806281e4316852ca50a8ad0918bdbd519e39efff0ed3b12e73156a5dad97c3c1a4d70786318bb6833646ef9ddf289d0ea824b6b44a5954d9734cd8b149863636c4db4a31e4a00e86eaf004fe496abcc92401abdead369644bdb327dd5f2dd1ee792d3c6feb53bc36e1f7d4b95472f6272f36b7c65f1d4547e517fed8a007a76c2b39f5cea00c3937433a03bd96b64983c6195236c6bd51ed55c76baab4a5512fcf9f515292b4d41e43685440b6fdd2a94dbb56466db8f741009184f5b41f5c838d39ab0724c7a549b805de1e04d07d12c640f9aecedc44cfd52e98ef3a357865325776b15158080b2b2f2f9db11fce262cc1d7916548829aa4d8f1601bb4dd0fbe8ee2036dd9624ed415691c334254884157445e35228abc1a16c90121b6785a8e3236457d5612dc8c5e4d64bce94f3d0c9a09e57fb7721414d427d754a47799b19f9a53d8ccf2672e2a790a46fab7bdf4d0f1be7847d09ca479570b84040be5f087c264d28ee015f04a6439a9f4935345e2c1e6ddb95083f559b4c9cfa75fb2a34507547a8c613dd2e928bc43524070f4776f2bc125e0e813acb925e8cd7bb1aea9a7f0ead22c922c72ca5ff005ef2ad787867e6375edf6580afaa57dc4d4fbd53444f974e875a7704118ec1f4771e44a53c6746de31911d695c28f4ed9401247b6a0768bb1d95358d97a0af55cd104bb6021958ef6a6e290159941902a6d5afbd785b6263e19fe98a1da1989628d2771254b50a50fcfbace25b28ac0e05dda231eb994940a49c1c00d1dcd043bc864b4402a0cb8caf98bb09cb0760de0593b1ba8350ee42e78f0616d5d4a4c00301556257bc37b8979b72edb7e5c9a3353481086c52316db12314541827fb941559a1fe076d13893bd632b6a9801c17db6483a5d790362843c86cae4f783f26cb5f7d76a0941addf55d47aabaa62328999154c3ea953cbdfaccbd828aaf280a5869fc34a8845377126da554450198dc1f4685803f771c21facdffe3cc45f2863ec04228cfa9406ba206abf7f29c8e3c6b39d2e40226680a71a5c4bda535935985d162b99ed7733dd9f3f1ac4842ea0467ca0a41cb2c45a6314fa4ae456403f72c3bb06522de36f2d8f1a801d978e38d5f61a511c2c60184a5977c0ac43c75b4e03241b1ccd7860d8da2ee068fc47f28c90facc2b018b64b0d614bae02a6195dc0675fce349aa4766c91dc952cd68ff190ffea44838d9acddd84ddc97e7b19efecb949f64e50a55a1873c481e42a436219be3dc5635e4275b6039b178cf44fb00aac2d24432e8cae4a8515af2bc5c2869f6678771cde21ea036740ef3a5f15cfa378de63ded219bac6c41453f242ef68c8b871785af5ad427971724c98dfa1e11254a5b29fac52b12a3a239a306840678169f4939d1751067f80343e83b6d1b3437a8149d6be39c618f3df905003c26b15a0bcfc39ac849606fcba1d52474349f7144383a8b263a38697d054599c415147ea8ef4b4b92dbe4c4ff6ba909b6d5baca307e27909a43215c201d832b92a0ab504adacb93493a4a2c32f85a63e194d3815c6afdc090821ba3662a4421ca8c0327025d82a96fd8616561bf937c56cb8c308113ef98dde96c9896739f12b8a1fcd8eeb3490979149f63573955db56dffe964033f662eebf10d720c661eedd35443bb67b1743271733d509bea84cf86c688f5c9d0335397b8867655f8d404024b0325814bb5103fcbdddb192c7bedd705c26ab679e56e7ee918ab271bcdb4f67d4695fa7c42d5d4967997e97313708e0bc6ffdf9528b8f44664c72aeee5a7df6a44973e6bde137b3392d6756a3f790e1bd411d464818d249704ac51001fea24628f7c9582fac5d45e71857a9c9a4b237f118a125e9ef525d0c4f847e9561ed7d8957e870909e11316d8da80a60ec613b0dc17be4b842c716d97937077c791438118425692db22b039705ee5a8094613d5fce3d547b76089d578bf58f5721b53cb1a6919d305fb11842e45932b7566df6a510f3fb70c17a41febe43b025adddd370f9527b4581c7af95359200f0d384a93bba38a9b4b19a8de0419e6c8c014c117c573394c5ece20743d633fd373edf4ee054c1ccf9b5a6a583ea15cfe56be50f0c4ff2f19d728e335ecb4c2b4101c64012973ba3eaace831f1b8e471438d6f72e713f77fb7349a2f8aea5b6654dfb7682e323fa1d3df8cd42f8a62968ac2ee1d7d3468a2f592fcf9d0876f8e9dfc0cb37b6342e342f4c76fe989420ab05dab3a5e8061db075f0fca550f937caa028d11a5216c75ec742a72b0ab86ad1aad03128509814f7f809c3786952b1c2bf0ada3a965bc5ff443ec636d040b33f444a985abf8ad78a01e41fd6256e79e890df77ff6f214b93ddaa2e27472f1ec6e49f71956fffbcf9eb9fbc47e21b69e140742b164cd54404bd603d3430b5fd622bb6f87d03e07bb43248a0bf3420131d8d2dcd851fd7b133d93c64e9fda49c30fefe0dc27df080ad672ca4608db237bab3c3bd3955c73f9548c31af1a7f91be1a1e370a8bd90242f701c42c16fb679cbe4bf9d80233a0fab4e0a02286e039d8b69504679a7646eb02d7dc3ab1d12d3a5558334a4418abf709ed818e8493092c59dd63d12cdb1b1710a04e2ef958107341b94e57aa4c79b46686937606d7ae81c717f9215b29082a67143763a017f22a94ab8eb053924fc96851da0c724bb52d1ace46d6ab72bdec0c4189c37bc4bdc4d8b68caa9e4d2e8767f27b5e4ce6c58d00668b70c7ef72a5574f0c10601c8d52c8cf84f4ead2d4a40265c0c53db5393317384f54358a3671f266d99ad92155d07a93e8cf561d9283215bb1d187e8c158539e0f8e7ef39aab72eebc1932f91cf1297de695fd1bda88cc40c4c8f45c8b4919790fbcdce7c7b97b2c2bd6d4ac7092919ec772b4b482c704919fa46da567f3adfa6d663f35d866e796e7f3f8cadd711785e3f4cc5c4340a0b97d5024d79102963a574f8a471a49798810e059d0be4a2e102d8678587ef5c408e23fe7edc96400a12c256b91cc30f8f0b61e50623df3618e8017539acadbf9e3f866fe12be7cfd82c8fbf4cc35456c554bba83d1da43291781b239fe6600e0c3b1735cbdcf6e2273e0db2af02825e667bcc05dd0637f8f8d8830a224555f2971c1ccbbe6c9980fcbd209fe6c1254349e9d576a68d16523c4dbe8b9f1ea3ac5eeca469ee4654a25241984b7f38632a1734924287f874a565b0e068083bcc87615c1308c24d57b4b10973d85e8db6932b81532eabaeaaf505c3a648a2138139f8f0f6ed22482a34df126a7b0cc6fc5eb8e9d82e66ee740d67ac2cf63aa59060aade587de429ded60f8620bd3c46719b37aff863b48434c3ed20dfcac0e407ec5bb273b5ffb9ed868652aa95f7aab65f78824f93b4f7a87bffa892e691c9c711199234d0e9a3ae49875f61a9daa75ddb3d62eba381b4d03d530dd1d14a0b33f22fdd3d04d9cfe34209cf8ae8d450576b13ef2badb7d21011760cb8b27a4b48ebc79ddc3980c523a9778aee359ba4ecc7360e561e4ae116e438e8c359c4e357aa61e9b0f931f95ec237a9b875b77ede68c5fb2360b4cb93df0a1ceb7d1e68afe351cd1860afdfc87b0e1cbc5e5f33904178226315d0987ae4ac01572006a9cedcf038d42f823ee01d79fb07ffec0a33a7a7919e89028050d4726b07cb5435f9111ad60157bb7c73adee60941b2fe55cbf4b6b71870eb43b75b478e5f27ae4d236a7833f3d2c6916cc54e8eead463c7cb9af181fbe7d08e20672fd7ef6de241bff7972c82ae934318822d60b86431838418099d2c07ec1b527a8c7ab276e0fb168731365381d91de33e2c7057542eea3cc743de2db10be72c545e1361070c4ac97f936eda98a4d131b24396372ce3d5ad8f62983e25d60fc3b91790027e249648a07bc7d374932b0ef10c8a70f1d183a1cff1c92ee17d62bef3b53cd575c188deba3dc31ef3dabadbb1e18cf9a7fa0c6155e1ed2f667e6d7c0549127dfa4b426285d94ee2281691977a1cda13de22bec17c5c6ae7bbc98911c6b3886a71e8fb791944bfb8ccf5723a2150bb78704b8601146ac19884f3021d85dcec89c56fc6dbe1b5e7434d56668ed7e285143803078feb7fbb2eaecd75f1b8ffb3091c1c87674aaa5054207a83cc119dd798abcda82d3e852a12f185d4199344ecd452bd478e21fd816b6e95c97c5aec884e86ddfabe8176b761abd5155cb54c191c65a4adbfe7ee8f3e194fd44f817ef772ebb2724241a48caa2a132c812c3b71ff53c954f746a2bfa6d860ca9839af223dbcf3f24a2edf35ffeec1a6f03fce19af11b510b69fa3d206cbefb1935bfc53ca2a7b383a0dbce89e8c24ebd24c8d7ca49e6c88c8eb23b5753bc8a", &(0x7f0000000240)="8436cb882b46d53b0e0aa9223225206d34e27668fa280f48385643ec00e9d1fcd7e02efc05a6c2479a2bd1dff5af87a72c7f13ba90c8405ba2f541a2662e83859792d94fb3086b2e2bbb2a54932eecbe33059c750a56298ee1f6dc3fa2fa871277a85ec27186feb153dcb7c9c45f5970ad31", 0x3, r0}, 0x38) 13:23:48 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000004800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x7000000}}) 13:23:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xa, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x2e, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x20}, 0xf0ff7f) 13:23:48 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x8000000}}) [ 1242.320335][T26649] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:48 executing program 5: r0 = socket(0x10, 0x803, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff01000000e7d06953e2748622ac146a37ce331474af14aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 1242.477310][T26677] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1242.489753][T26649] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1242.497916][T26678] EXT4-fs (loop3): bad geometry: first data block 18432 is beyond end of filesystem (1080) [ 1242.502040][T26677] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:23:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @broadcast}}]}, 0x40}}, 0xc4) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x9000000}}) [ 1242.525799][T26677] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1242.540428][T26677] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xa000000}}) 13:23:48 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 13:23:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xb, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:48 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000014800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xb000000}}) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xc000000}}) [ 1242.855170][T26720] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:48 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xd000000}}) 13:23:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x5c}, 0xa) 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xe000000}}) [ 1242.951465][T26724] EXT4-fs (loop3): bad geometry: first data block 18433 is beyond end of filesystem (1080) [ 1242.991706][T26729] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1243.007916][T26729] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1243.017513][T26720] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1243.029591][T26729] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:23:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x10000000}}) 13:23:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1243.061757][T26763] __nla_validate_parse: 26 callbacks suppressed [ 1243.061764][T26763] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1243.090960][T26763] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1243.099976][T26729] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:49 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001100006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x11000000}}) 13:23:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000fdffff0100ffffac1414470c7a850001000000000000000000ffffac1414aa"], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r4, 0x8, 0x100048) 13:23:49 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000004c00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x12000000}}) [ 1243.251600][T26778] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1243.261853][T26785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x25000000}}) [ 1243.298643][T26785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x5c000000}}) 13:23:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0x6e080000}}) [ 1243.422444][T26778] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1243.422582][T26789] EXT4-fs (loop3): bad geometry: first data block 19456 is beyond end of filesystem (1080) [ 1243.488561][T26800] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1243.500013][T26800] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1243.514076][T26800] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:23:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1243.529956][T26800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xe7ffffff}}) 13:23:49 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000001200006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:49 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000005c00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xfdfdffff}}) [ 1243.677621][T26835] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xfffffdfd}}) 13:23:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xe, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xffffffe7}}) 13:23:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1243.941385][T26862] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1243.996480][T26856] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1244.010715][T26856] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1244.022538][T26856] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1244.035425][T26856] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544, 0xffffffff}}) 13:23:49 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000006000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800054e6c81500006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:23:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1244.154377][T26862] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x8, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000141c0000000a0012000000000000000073cdd421d998da59b6", @ANYRES32=r2, @ANYRESHEX=r2, @ANYBLOB="f6cb2075c3e83a3b61", @ANYRES16, @ANYRESOCT=r0, @ANYRESOCT], 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000a00ebffffff0000000000000000000000b7052816f0ff3c1652eef375bff18de25cb2b28dd300dff0c7f83e14255e9f7fe06b33a0ee5cff03ac31b28e31a714c542cd05cb68e467d9c947dc4f4b93025f83e6921686eba6417c66cec2c3afb29be4fb648f79fd43c8bcca27c86dea84f4bbe5087e42dca8b23392b8433d2144ea3eda23ff36f72dbf69eb12ff1fd930169a182135d9f0f0ffd98cea02303b1bd4c6e0e81177961a1186cded03c8dd66947b398d719d36b2f1196901504abafa529a4d57e061b7b015e52fccb64214519d5d4cbaead3930466", @ANYRES32=r3, @ANYBLOB="1400020031c10000000000000200ffffac1414001400010000000000000000000000ffffac1414aa"], 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000000c0)={r8, 0x2}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f00000000c0)={r8, 0xc}) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f0000000100)={r8, 0x3ffffffffffffd6c, &(0x7f0000000000)=[0x9, 0x7fffffff, 0x81, 0x5, 0xd9, 0xb26d, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0xf5a6, 0x1f, 0x1], 0x10, 0x3, 0x0, &(0x7f0000000080)=[0x3, 0x9, 0x100], &(0x7f00000003c0)=[0x2, 0x81, 0xff, 0x7]}) syz_open_pts(r6, 0x80000) 13:23:50 executing program 5: perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x700}, {0x6}]}) 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x2]}) 13:23:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x3]}) [ 1244.425227][T26908] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1244.442502][T26899] EXT4-fs (loop3): bad geometry: first data block 24576 is beyond end of filesystem (1080) 13:23:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1244.508612][T26908] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:50 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000006800000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000002500006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x4]}) 13:23:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x2bcf) 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x5]}) 13:23:50 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000006c00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x6]}) [ 1244.847571][T26963] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x7]}) 13:23:50 executing program 5: sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x140c2, 0x0) socket(0x0, 0x0, 0x0) [ 1244.973560][T26984] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1245.009906][T26984] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:23:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2d087000, 0x0, 0x0, 0x0, 0x0) [ 1245.026206][T26963] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1245.050349][T26984] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1245.063484][T26984] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1245.086863][T26989] EXT4-fs (loop3): bad geometry: first data block 27648 is beyond end of filesystem (1080) 13:23:51 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000003f00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x8]}) 13:23:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x12, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x48, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x9]}) 13:23:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:51 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000007400000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xa]}) [ 1245.365409][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.385806][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.426522][T27032] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1245.470778][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.480359][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.491945][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.501527][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xb]}) [ 1245.520549][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.531220][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.540623][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 [ 1245.551214][T27034] kvm [27029]: vcpu0, guest rIP: 0x14c disabled perfctr wrmsr: 0xc2 data 0x1 13:23:51 executing program 5: unshare(0x2e040600) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) 13:23:51 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800015c8e65400006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xc]}) [ 1245.666658][T27062] EXT4-fs (loop3): bad geometry: first data block 29696 is beyond end of filesystem (1080) [ 1245.682457][T27032] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xd]}) 13:23:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x25, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xe]}) 13:23:51 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000007a00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1245.878038][T27102] EXT4-fs (loop2): invalid inodes per group: 3356819584 [ 1245.878038][T27102] 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x10]}) 13:23:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:51 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000005c00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x11]}) [ 1245.999873][T27112] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1246.128827][T27112] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1246.176679][T27122] EXT4-fs (loop3): bad geometry: first data block 31232 is beyond end of filesystem (1080) [ 1246.267197][T27138] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1246.277878][T27138] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1246.288003][T27138] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1246.298571][T27138] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:23:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 13:23:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x12]}) 13:23:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2d, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:52 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:52 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000c0ed00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:52 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000f0ff7f00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x25]}) 13:23:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x5c]}) 13:23:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xe7]}) [ 1246.745732][T27177] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1246.771494][T27178] EXT4-fs (loop3): bad geometry: first data block 60864 is beyond end of filesystem (1080) 13:23:52 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:52 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000fffffdef00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:52 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000000)) 13:23:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x300]}) 13:23:52 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000fff00000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1246.952824][T27177] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x48, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x500]}) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x600]}) 13:23:53 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x700]}) [ 1247.166572][T27237] EXT4-fs (loop2): invalid inodes per group: 4294901888 [ 1247.166572][T27237] [ 1247.187835][T27251] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1247.200134][T27245] EXT4-fs (loop3): bad geometry: first data block 65295 is beyond end of filesystem (1080) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x86e]}) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x900]}) 13:23:53 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000fffffffe00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1247.325590][T27251] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:53 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000201000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x5011, r0, 0xc74c1000) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4c, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xa00]}) 13:23:53 executing program 0: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1247.550898][T27298] EXT4-fs (loop2): invalid inodes per group: 4294901888 [ 1247.550898][T27298] [ 1247.561620][T27300] EXT4-fs (loop3): bad geometry: first data block 66048 is beyond end of filesystem (1080) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xb00]}) 13:23:53 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000effdffff00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xc00]}) 13:23:53 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000002000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xd00]}) [ 1247.727553][T27311] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:53 executing program 0: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xe00]}) [ 1247.867989][T27311] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1247.883026][T27338] EXT4-fs (loop2): invalid inodes per group: 4260298880 [ 1247.883026][T27338] 13:23:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x1100]}) [ 1248.033221][T27342] EXT4-fs (loop3): bad geometry: first data block 131072 is beyond end of filesystem (1080) 13:23:54 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000feffffff00006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5c, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x1200]}) 13:23:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x5011, r0, 0xc74c1000) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:54 executing program 0: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:54 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000102000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x2500]}) 13:23:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x5c00]}) [ 1249.105576][T27391] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:55 executing program 0: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x6e08]}) [ 1249.210816][T27389] EXT4-fs (loop2): invalid inodes per group: 4294836352 [ 1249.210816][T27389] [ 1249.244610][T27402] EXT4-fs (loop3): bad geometry: first data block 131328 is beyond end of filesystem (1080) 13:23:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x60, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xe7ff]}) 13:23:55 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000002000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xfdfd]}) 13:23:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xffe7]}) [ 1249.549877][T27450] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1249.607431][T27441] EXT4-fs (loop2): invalid inodes per group: 33554560 [ 1249.607431][T27441] [ 1249.670657][T27450] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:55 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x5011, r0, 0xc74c1000) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:55 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000402000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x1000000]}) 13:23:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x68, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:55 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000003000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x2000000]}) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x3000000]}) [ 1249.902371][T27493] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x4000000]}) 13:23:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6c, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x5000000]}) [ 1250.089988][T27510] EXT4-fs (loop3): bad geometry: first data block 132096 is beyond end of filesystem (1080) [ 1250.100974][T27511] EXT4-fs (loop2): invalid inodes per group: 50331776 [ 1250.100974][T27511] [ 1250.309692][T27527] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1250.424389][T27527] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:56 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x5011, r0, 0xc74c1000) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x6000000]}) 13:23:56 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:56 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:56 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000004000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x70, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x7000000]}) 13:23:56 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x8000000]}) 13:23:56 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1250.796482][T27557] EXT4-fs (loop3): bad geometry: first data block 262144 is beyond end of filesystem (1080) [ 1250.813221][T27565] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x9000000]}) 13:23:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x71, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1251.088751][T27602] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1251.144327][T27602] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xa000000]}) 13:23:57 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:57 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000204000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000005000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x72, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xb000000]}) 13:23:57 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1251.571229][T27628] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xc000000]}) 13:23:57 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xd000000]}) 13:23:57 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1251.757536][T27624] EXT4-fs (loop3): bad geometry: first data block 262656 is beyond end of filesystem (1080) [ 1251.774967][T27644] EXT4-fs (loop2): invalid inodes per group: 83886208 [ 1251.774967][T27644] [ 1251.800584][T27628] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x73, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xe000000]}) 13:23:58 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000006000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:58 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:58 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000fc0704000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x10000000]}) 13:23:58 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x11000000]}) 13:23:58 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1252.503987][T27682] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1252.520644][T27683] EXT4-fs (loop2): invalid inodes per group: 100663424 [ 1252.520644][T27683] 13:23:58 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x12000000]}) [ 1252.700761][T27682] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:59 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:59 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000804000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x25000000]}) 13:23:59 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x74, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:59 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000007000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x5c000000]}) 13:23:59 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1253.286684][T27738] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x6e080000]}) 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xe7ffffff]}) [ 1253.447565][T27738] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1253.456173][T27752] EXT4-fs (loop3): bad geometry: first data block 264192 is beyond end of filesystem (1080) 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xfdfdffff]}) 13:23:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7a, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1253.489108][T27753] EXT4-fs (loop2): invalid inodes per group: 117440640 [ 1253.489108][T27753] [ 1253.777405][T27784] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1253.855787][T27784] EXT4-fs (loop1): Invalid log cluster size: 1280 13:23:59 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:23:59 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xfffffdfd]}) 13:23:59 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000008000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:59 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000008000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x148, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:23:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xffffffe7]}) 13:24:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0xffffffff]}) [ 1254.194054][T27810] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:24:00 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}) [ 1254.299924][T27808] EXT4-fs (loop3): bad geometry: first data block 524288 is beyond end of filesystem (1080) 13:24:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x2]}) 13:24:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x204, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1254.374866][T27810] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1254.381628][T27813] EXT4-fs (loop2): invalid inodes per group: 134217856 [ 1254.381628][T27813] [ 1254.552892][T27852] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1254.610424][T27852] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:00 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:00 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000408000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x3]}) 13:24:00 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000009000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:00 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) 13:24:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x4]}) 13:24:00 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x5]}) 13:24:00 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) [ 1255.123580][T27882] EXT4-fs (loop3): bad geometry: first data block 525312 is beyond end of filesystem (1080) [ 1255.134274][T27885] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x6]}) 13:24:01 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) 13:24:01 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000c000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) [ 1255.163795][T27905] EXT4-fs (loop2): invalid inodes per group: 150995072 [ 1255.163795][T27905] 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x7]}) 13:24:01 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000a000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x38d, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x8]}) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x9]}) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xa]}) 13:24:01 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) [ 1255.449916][T27945] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1255.463968][T27935] EXT4-fs (loop3): bad geometry: first data block 786432 is beyond end of filesystem (1080) [ 1255.514291][T27950] EXT4-fs (loop2): invalid inodes per group: 167772288 [ 1255.514291][T27950] 13:24:01 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000010100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xb]}) 13:24:01 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000b000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1255.757385][T27945] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x38e, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:01 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xc]}) 13:24:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xd]}) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xe]}) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x10]}) [ 1255.964951][T28018] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1255.984372][T27998] EXT4-fs (loop3): bad geometry: first data block 16777216 is beyond end of filesystem (1080) 13:24:01 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000048010100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x11]}) 13:24:01 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) [ 1256.039416][T27996] EXT4-fs (loop2): invalid inodes per group: 184549504 [ 1256.039416][T27996] [ 1256.091340][T28018] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:02 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000c000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x12]}) 13:24:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x38f, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:02 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) 13:24:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x25]}) [ 1256.295633][T28051] EXT4-fs (loop3): bad geometry: first data block 21495808 is beyond end of filesystem (1080) [ 1256.361509][T28066] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1256.498143][T28066] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1256.554054][T28085] EXT4-fs (loop2): invalid inodes per group: 201326720 [ 1256.554054][T28085] 13:24:02 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x5c]}) 13:24:02 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000020100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:02 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}]}) 13:24:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a8, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:02 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000d000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xe7]}) 13:24:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x300]}) [ 1256.953785][T28114] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1257.004262][T28127] EXT4-fs (loop2): invalid inodes per group: 218103936 [ 1257.004262][T28127] [ 1257.018761][T28126] EXT4-fs (loop3): bad geometry: first data block 33554432 is beyond end of filesystem (1080) 13:24:02 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}]}) 13:24:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3ea, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x500]}) [ 1257.053689][T28114] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:03 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004020100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1257.274356][T28160] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1257.376295][T28173] EXT4-fs (loop3): bad geometry: first data block 33816576 is beyond end of filesystem (1080) [ 1257.389348][T28160] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:03 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000000e000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x600]}) 13:24:03 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}]}) 13:24:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3f6, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:03 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000030100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x700]}) 13:24:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x86e]}) 13:24:03 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1257.724872][T28199] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x900]}) 13:24:03 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {}]}) [ 1257.885247][T28199] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1257.893010][T28214] EXT4-fs (loop2): invalid inodes per group: 234881152 [ 1257.893010][T28214] 13:24:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x402, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1258.100369][T28232] EXT4-fs (loop3): bad geometry: first data block 67108864 is beyond end of filesystem (1080) [ 1258.144589][T28238] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1258.283459][T28238] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xa00]}) 13:24:04 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000010000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:04 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000050100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:04 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {}]}) 13:24:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x406, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xb00]}) 13:24:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xc00]}) 13:24:04 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {}]}) [ 1258.714270][T28270] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1258.724798][T28269] EXT4-fs (loop2): invalid inodes per group: 268435584 [ 1258.724798][T28269] [ 1258.752590][T28268] EXT4-fs (loop3): bad geometry: first data block 83886080 is beyond end of filesystem (1080) 13:24:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xd00]}) 13:24:04 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000060100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xe00]}) [ 1258.844453][T28270] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1259.134143][T28325] EXT4-fs (loop3): bad geometry: first data block 100663296 is beyond end of filesystem (1080) 13:24:05 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:05 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000011000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x410, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x1100]}) 13:24:05 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) 13:24:05 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004060100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x1200]}) 13:24:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x2500]}) 13:24:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x5c00]}) [ 1259.511639][T28360] EXT4-fs (loop2): invalid inodes per group: 285212800 [ 1259.511639][T28360] [ 1259.528311][T28350] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:05 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) 13:24:05 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000012000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x6e08]}) [ 1259.670542][T28349] EXT4-fs (loop3): bad geometry: first data block 100925440 is beyond end of filesystem (1080) [ 1259.683638][T28350] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1259.922419][T28396] EXT4-fs (loop2): invalid inodes per group: 301990016 [ 1259.922419][T28396] 13:24:06 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xe7ff]}) 13:24:06 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) 13:24:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x500, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:06 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000070100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:06 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000025000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xfdfd]}) 13:24:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xffe7]}) [ 1260.394683][T28428] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1260.410802][T28426] EXT4-fs (loop3): bad geometry: first data block 117440512 is beyond end of filesystem (1080) 13:24:06 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000080100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:06 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:24:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x1000000]}) [ 1260.487197][T28445] EXT4-fs (loop2): invalid inodes per group: 620757120 [ 1260.487197][T28445] [ 1260.519531][T28428] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x600, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1260.801357][T28462] EXT4-fs (loop3): bad geometry: first data block 134217728 is beyond end of filesystem (1080) [ 1260.848197][T28486] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1260.987598][T28486] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:06 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x2000000]}) 13:24:06 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:24:06 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00000000000000010000000100000000400000004000008000005c000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:06 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000090100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x604, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x3000000]}) 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x4000000]}) [ 1261.244956][T28517] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1261.259375][T28519] EXT4-fs (loop3): bad geometry: first data block 150994944 is beyond end of filesystem (1080) 13:24:07 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff024}, {0x6}]}) 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x5000000]}) [ 1261.328833][T28517] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1261.335890][T28533] EXT4-fs (loop2): invalid inodes per group: 1543504000 [ 1261.335890][T28533] 13:24:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x700, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:07 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000a0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1261.545983][T28564] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:07 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x6000000]}) 13:24:07 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000004020000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:07 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}) 13:24:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x900, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1261.639586][T28564] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x7000000]}) [ 1261.699175][T28570] EXT4-fs (loop3): bad geometry: first data block 167772160 is beyond end of filesystem (1080) 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x8000000]}) [ 1261.797843][T28594] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x9000000]}) [ 1261.856185][T28589] EXT4-fs (loop2): invalid inodes per group: 67108992 [ 1261.856185][T28589] 13:24:07 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}) 13:24:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xa000000]}) 13:24:07 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000b0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1262.055914][T28594] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1262.149454][T28644] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:08 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) 13:24:08 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000030000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xb000000]}) 13:24:08 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}) 13:24:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xb00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1262.218883][T28644] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1262.226256][T28638] EXT4-fs (loop3): bad geometry: first data block 184549376 is beyond end of filesystem (1080) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xc000000]}) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xd000000]}) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xe000000]}) [ 1262.384590][T28675] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1262.396174][T28660] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1262.418757][T28660] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:24:08 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000c0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x10000000]}) 13:24:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/189, 0x4}], 0x2a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) [ 1262.432818][T28660] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x11000000]}) [ 1262.485074][T28675] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1262.492313][T28660] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1262.588578][T28701] EXT4-fs (loop3): bad geometry: first data block 201326592 is beyond end of filesystem (1080) 13:24:08 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, 0x0, 0x4240a2a0) 13:24:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x12000000]}) 13:24:08 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000002040000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:08 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000d0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x25000000]}) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x5c000000]}) 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x6e080000]}) [ 1263.014770][T28747] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xe7ffffff]}) [ 1263.077222][T28740] EXT4-fs (loop3): bad geometry: first data block 218103808 is beyond end of filesystem (1080) [ 1263.113434][T28747] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xd00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1263.121094][T28756] EXT4-fs (loop2): invalid inodes per group: 33554560 [ 1263.121094][T28756] 13:24:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x8010500c, &(0x7f0000000000)) 13:24:09 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000006040000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1263.323391][T28777] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1263.375103][T28783] EXT4-fs (loop2): invalid inodes per group: 100663424 [ 1263.375103][T28783] [ 1263.397181][T28777] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:09 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, 0x0, 0x4240a2a0) 13:24:09 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000e0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xfdfdffff]}) 13:24:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x5011, r1, 0x0) 13:24:09 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000050000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xfffffdfd]}) 13:24:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xe00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xffffffe7]}) 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0xffffffff]}) [ 1263.689702][T28821] EXT4-fs (loop3): bad geometry: first data block 234881024 is beyond end of filesystem (1080) [ 1263.718511][T28836] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1263.725836][T28833] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}}) 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x2]}) [ 1263.742482][T28833] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1263.753083][T28833] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1263.773061][T28833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:09 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000100100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1263.841619][T28836] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1264.015941][T28866] EXT4-fs (loop3): bad geometry: first data block 268435456 is beyond end of filesystem (1080) 13:24:09 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$binfmt_misc(r0, 0x0, 0x4240a2a0) 13:24:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x3]}) 13:24:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:09 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000060000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:09 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000280)=0x1000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 13:24:09 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004100100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:10 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') sendfile(r0, r1, 0x0, 0x3) 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x4]}) [ 1264.242725][T28894] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1264.252986][T28881] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1264.269218][T28881] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x5]}) [ 1264.292183][T28881] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1264.304222][T28881] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1264.325559][T28888] EXT4-fs (loop3): bad geometry: first data block 268697600 is beyond end of filesystem (1080) 13:24:10 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x4}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x6d}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:24:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000004060000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x6]}) [ 1264.350470][T28894] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1264.550075][T28927] EXT4-fs (loop2): invalid inodes per group: 67108992 [ 1264.550075][T28927] 13:24:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000070000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') sendfile(r0, r1, 0x0, 0x3) 13:24:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1020, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:10 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0xd0}}, 0x34}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 13:24:10 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000110100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x7]}) 13:24:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x4b71, &(0x7f0000000000)) 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x8]}) [ 1264.803976][T28955] ptrace attach of "/root/syz-executor.5"[28952] was attempted by "/root/syz-executor.5"[28955] 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x9]}) [ 1264.912424][T28950] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1264.949461][T28963] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:24:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd983f79e651996156", 0x42}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:24:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @broadcast}, {0x0, @random="24e0d1c70776"}, 0x48, {0x2, 0x0, @local}, 'veth0_to_bond\x00'}) 13:24:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xa]}) [ 1265.023107][T28963] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1265.037661][T28963] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1265.063100][T28985] ptrace attach of "/root/syz-executor.0"[28984] was attempted by "/root/syz-executor.0"[28985] [ 1265.084667][T28964] EXT4-fs (loop3): bad geometry: first data block 285212672 is beyond end of filesystem (1080) [ 1265.118507][T28950] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1265.139117][T28963] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:11 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000090000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:11 executing program 0: syz_genetlink_get_family_id$nbd(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$devlink(0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lookup_dcookie(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xb]}) 13:24:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1100, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:11 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000120100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xc]}) 13:24:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$devlink(0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lookup_dcookie(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xd]}) 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xe]}) [ 1265.353807][T29006] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x10]}) [ 1265.503710][T29006] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1265.514053][T29030] EXT4-fs (loop3): bad geometry: first data block 301989888 is beyond end of filesystem (1080) 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x11]}) 13:24:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x12]}) [ 1265.599389][T29029] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1265.628788][T29029] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1265.644213][T29029] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1265.655789][T29029] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:11 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000a0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1265.844450][T29060] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1265.854365][T29060] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1265.865514][T29060] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1265.878278][T29060] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='i\x00\x00O\x00\x02\x00\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x20, 0x0, "c15bf01f087d9b6b2b4ef2eccc1af741994072b427e00bbc53688e43ffcea5ee418ce7849ff32e33ea3fef495b9d29359a4593f4bed6f4cc492689ec6c293f53", "2ad9fecca7cc61acea23c4f3f3fa50d96f78bb5301efaa332caf8d8b649b433f"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 13:24:12 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000200100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1200, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x25]}) 13:24:12 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000b0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xc}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x12c}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x5c]}) 13:24:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 13:24:12 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xf5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xe7]}) [ 1266.320887][T29089] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1266.331804][T29103] ptrace attach of "/root/syz-executor.5"[29102] was attempted by "/root/syz-executor.5"[29103] 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x300]}) [ 1266.452610][T29105] EXT4-fs (loop3): bad geometry: first data block 536870912 is beyond end of filesystem (1080) [ 1266.485675][T29087] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1266.496505][T29089] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0x1d}}, 0x34}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x500]}) [ 1266.503588][T29087] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1266.515656][T29087] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1266.529605][T29087] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:12 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000010200100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1f00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000c0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x600]}) 13:24:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='i\x00\x00O\x00\x02\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x20, 0x0, "c15bf01f087d9b6b2b4ef2eccc1af741994072b427e00bbc53688e43ffcea5ee418ce7849ff32e33ea3fef495b9d29359a4593f4bed6f4cc492689ec6c293f53", "2ad9fecca7cc61acea23c4f3f3fa50d96f78bb5301efaa332caf8d8b649b433f"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 13:24:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "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"}, 0x174) 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x700]}) [ 1266.758638][T29136] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x86e]}) 13:24:12 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$unix(0x1, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1266.880128][T29155] EXT4-fs (loop3): bad geometry: first data block 537919488 is beyond end of filesystem (1080) [ 1266.917008][T29158] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:24:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x900]}) [ 1266.928116][T29158] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1266.940352][T29158] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1266.952290][T29158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:12 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000d0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:13 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000250100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xa00]}) 13:24:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 13:24:13 executing program 0: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xf372, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) unshare(0x0) [ 1267.216917][T29192] ptrace attach of "/root/syz-executor.0"[29191] was attempted by "/root/syz-executor.0"[29192] 13:24:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xb00]}) 13:24:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xc00]}) [ 1267.387115][T29197] EXT4-fs (loop3): bad geometry: first data block 620756992 is beyond end of filesystem (1080) [ 1267.398516][T29199] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:13 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000000e0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1267.435549][T29212] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1267.445801][T29212] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1267.457801][T29212] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1267.468812][T29212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xd00]}) [ 1267.533699][ T2731] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1267.567846][T29199] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:13 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x4000000000010046) 13:24:13 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000002d0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xe00]}) 13:24:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1267.691220][T29243] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1267.701346][T29243] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1267.714758][T29243] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:24:13 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000008100000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1267.727163][T29243] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x1100]}) 13:24:13 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006f80)=""/19, 0x13}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 1267.884990][T29257] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1267.894043][ T2731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1267.908212][ T2731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.920127][ T2731] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40 [ 1267.929982][ T2731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.939442][ T2731] usb 1-1: config 0 descriptor?? [ 1267.957153][ T29] audit: type=1804 audit(5884925053.797:31): pid=29285 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir335514241/syzkaller.F5q4VP/2860/bus" dev="sda1" ino=16351 res=1 [ 1268.069276][T29282] EXT4-fs (loop2): invalid inodes per group: 134217856 [ 1268.069276][T29282] [ 1268.165276][T29257] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1268.436722][ T2731] hid-led 0003:04D8:F372.0001: unknown main item tag 0x0 [ 1268.491959][ T2731] hid-led 0003:04D8:F372.0001: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 1268.591879][ T2731] hid-led 0003:04D8:F372.0001: Greynut Luxafor initialized [ 1268.648355][ T2731] usb 1-1: USB disconnect, device number 4 [ 1268.680606][T29303] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1268.716018][T29303] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1268.735114][ T29] audit: type=1804 audit(5884925054.577:32): pid=29339 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir335514241/syzkaller.F5q4VP/2860/bus" dev="sda1" ino=16351 res=1 [ 1268.824961][ T2713] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1268.839428][ T2713] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1268.903944][ T2713] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1268.925710][ T2713] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1268.952465][ T2713] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1268.981613][ T2713] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1269.005977][ T2713] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1269.034152][T29303] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1269.042795][ T2713] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1269.059523][T29303] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1269.075270][ T2713] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1269.089587][ T2713] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1269.105834][ T2713] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1269.120852][ T2713] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1269.143531][ T2713] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1269.155319][ T29] audit: type=1804 audit(5884925054.987:33): pid=29344 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir335514241/syzkaller.F5q4VP/2860/bus" dev="sda1" ino=16351 res=1 [ 1269.182806][ T2713] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1269.544615][ T2731] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1269.914845][ T2731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1269.940282][ T2731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.954059][ T2731] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40 [ 1269.965269][ T2731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.977040][ T2731] usb 1-1: config 0 descriptor?? 13:24:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r1, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "9b2a9d2792f5f00898f84fadbe6cbac4175b796eb94090624f4613362a0f2d9731fab865"}]}, 0x3c}}, 0x0) 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x1200]}) 13:24:16 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004370100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2500, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:16 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000110000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:16 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}}, 0x24, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x2500]}) 13:24:16 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) [ 1270.334812][ T2731] usbhid 1-1:0.0: can't add hid device: -71 [ 1270.340957][ T2731] usbhid: probe of 1-1:0.0 failed with error -71 13:24:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r5, 0x828c1bb07686e401}], 0x1, 0x100) dup2(r1, r5) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x5c00]}) [ 1270.397224][ T2731] usb 1-1: USB disconnect, device number 5 [ 1270.413393][T29381] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:16 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) [ 1270.537262][T29382] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1270.570305][T29382] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x6e08]}) 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xe7ff]}) 13:24:16 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000004380100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1270.588084][T29382] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1270.605895][T29381] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1270.620413][T29382] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:16 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) 13:24:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2d00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:16 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000120000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xfdfd]}) [ 1270.735921][T29435] EXT4-fs (loop3): bad geometry: first data block 939786240 is beyond end of filesystem (1080) 13:24:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xffe7]}) 13:24:16 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000003f0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1270.959126][T29461] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1270.959622][T29451] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1270.974031][T29461] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1270.985496][T29461] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1271.000886][T29461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0x1c0, 0x1c0, 0xd8, 0xd8, 0x0, 0x288, 0x318, 0x318, 0x318, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x1000000]}) 13:24:17 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) 13:24:17 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000250000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1271.135392][T29451] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1271.144828][T29472] EXT4-fs (loop3): bad geometry: first data block 1056964608 is beyond end of filesystem (1080) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x2000000]}) 13:24:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3f00, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:17 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x2000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x2008001) sendmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0xf8, 0x0, 0x0, "da9b6b54ab129c34faa488b8886541a572a74f00d5df6843f2447c4b10a572e168c55c7cc4a32c8c268e37d8d96695f3bb72c4f97560a63c06cefa8379008a1e37c537a1ca13c928861f4a131bbd86711506855415445986be386fb771899c9a81177fbaef3980fa384b8035f3e5c6047d8607dc4632e7256a4ebfaef12b5308367fa51835db3c5b8264396ebe5be6f0a8fe13b7a1851740798e74334dfb065ce5e827ebc594e70fddfa64cc46f009717d01d9f48a2e178ea15b4a2c48a091e712cfcc8399fc323c339d5a580c78e43eda1a4773cf8d5c9c57d4ec4079a4195531"}, {0x70, 0x0, 0x0, "ff3158b7ab90bcf710f6082fc077cbb469828b6e77756691ec1eb5bd10d79782fb166db68ce7c87fb71c6f47515861105432bf7ddf7f280de91b64eab35adaa5fdee12ce8f9fda622c67469a75a580dac054b606811b77c7fc"}, {0x48, 0x0, 0x0, "b986233bf354b9156050884101496f4d9dc47c0a1ab805ab331ae9bdbc5c692f0f9b0e1306c8cf50b396420dfdcbfc1d99"}, {0x90, 0x0, 0x0, "1fd7640b2f84bdcb5b152a0056435b1493b44bb1d42a58a7c2e56dad3510f7681d9489f06eaafeb000e2e5d7ab6cae87871a0b06756522aaa32c1a37c0007649fddacde805c17a98df708943161079f03358c213e7461c287c8c20c9f7efce667f147aca8766a47a3341c83f5e07e6e0d06a62b78171aa0ed0"}, {0x548, 0x0, 0x0, "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"}], 0x788}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x3000000]}) [ 1271.180625][T29491] x_tables: duplicate underflow at hook 2 13:24:17 executing program 0: io_setup(0x4, &(0x7f00000004c0)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$nl80211(0x0) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x4000000]}) 13:24:17 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000400100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x5000000]}) [ 1271.344563][T29503] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:17 executing program 0: io_setup(0x4, &(0x7f00000004c0)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$nl80211(0x0) [ 1271.491693][T29503] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1271.499507][T29525] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1271.524407][T29525] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x6000000]}) [ 1271.534986][T29525] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1271.551192][T29525] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:17 executing program 0: io_setup(0x4, &(0x7f00000004c0)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$nl80211(0x0) [ 1271.595922][T29529] EXT4-fs (loop3): bad geometry: first data block 1073741824 is beyond end of filesystem (1080) 13:24:17 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000003f0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x7000000]}) 13:24:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendto$inet(r3, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 13:24:17 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x8000000]}) [ 1271.790570][T29567] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1271.813289][T29555] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:17 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000480100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:17 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x9000000]}) 13:24:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4800, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1271.912361][T29564] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1271.925066][T29555] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1271.951688][T29564] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:24:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xa000000]}) [ 1271.998881][T29564] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1272.035133][T29564] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1272.071398][T29586] EXT4-fs (loop3): bad geometry: first data block 1207959552 is beyond end of filesystem (1080) 13:24:18 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000005c0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xb000000]}) 13:24:18 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) [ 1272.189809][T29603] EXT4-fs (loop1): Invalid log cluster size: 1280 13:24:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xc000000]}) [ 1272.400458][T29603] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1272.507541][T29636] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1272.524490][T29636] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1272.546468][T29636] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1272.600187][T29636] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:24:18 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x4) 13:24:18 executing program 0: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0) 13:24:18 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000004c0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xd000000]}) 13:24:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4801, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000000050000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:18 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000001000000010000000040000000400000800000fdef0000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:24:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0xe000000]}) 13:24:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x8, 0x1000, 0x544}, [0x0, 0x0, 0x10000000]}) 13:24:18 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000005c0100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1272.906823][T29649] EXT4-fs (loop1): Invalid log cluster size: 1280 [ 1272.946133][T29661] ------------[ cut here ]------------ [ 1272.951644][T29661] WARNING: CPU: 0 PID: 29661 at fs/overlayfs/file.c:66 ovl_real_fdget_meta+0x597/0x640 [ 1272.961272][T29661] Kernel panic - not syncing: panic_on_warn set ... [ 1272.967856][T29661] CPU: 0 PID: 29661 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 1272.976514][T29661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.986565][T29661] Call Trace: [ 1272.989839][T29661] dump_stack+0x1e9/0x30e [ 1272.994152][T29661] panic+0x264/0x7a0 [ 1272.998560][T29661] ? __warn+0x102/0x210 [ 1273.002713][T29661] ? ovl_real_fdget_meta+0x597/0x640 [ 1273.007990][T29661] __warn+0x209/0x210 [ 1273.011970][T29661] ? ovl_real_fdget_meta+0x597/0x640 [ 1273.017247][T29661] report_bug+0x1ac/0x2d0 [ 1273.021597][T29661] do_error_trap+0xca/0x1c0 [ 1273.026083][T29661] do_invalid_op+0x32/0x40 [ 1273.030629][T29661] ? ovl_real_fdget_meta+0x597/0x640 [ 1273.036029][T29661] invalid_op+0x23/0x30 [ 1273.040213][T29661] RIP: 0010:ovl_real_fdget_meta+0x597/0x640 [ 1273.046088][T29661] Code: ff df e9 f2 fb ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 03 fc ff ff 4c 89 e7 e8 93 7c 2a ff e9 f6 fb ff ff e8 f9 82 ec fe <0f> 0b 41 bd fb ff ff ff e9 11 fc ff ff 48 8b 4c 24 10 80 e1 07 80 [ 1273.065781][T29661] RSP: 0018:ffffc9000186fe18 EFLAGS: 00010287 [ 1273.071923][T29661] RAX: ffffffff8286f6a7 RBX: 0000000004042000 RCX: 0000000000040000 [ 1273.079893][T29661] RDX: ffffc90013cad000 RSI: 0000000000000020 RDI: 0000000000000021 [ 1273.087854][T29661] RBP: 000000000000a000 R08: ffffffff8286f40b R09: ffffffff8286bd64 [ 1273.095831][T29661] R10: ffff8880249a4100 R11: 0000000000000002 R12: ffff888087054140 [ 1273.103806][T29661] R13: 0000000000000000 R14: 0000000000002000 R15: 1ffff11010e0a828 [ 1273.111982][T29661] ? ovl_llseek+0xa4/0x290 [ 1273.116383][T29661] ? ovl_real_fdget_meta+0x2fb/0x640 [ 1273.121652][T29661] ? ovl_real_fdget_meta+0x597/0x640 [ 1273.126944][T29661] ? ovl_real_fdget_meta+0x597/0x640 [ 1273.132430][T29661] ovl_llseek+0x7a/0x290 [ 1273.136664][T29661] ? mutex_lock_nested+0x1a/0x20 [ 1273.141683][T29661] __x64_sys_lseek+0x15b/0x1e0 [ 1273.146436][T29661] do_syscall_64+0xf3/0x1b0 [ 1273.150918][T29661] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1273.156786][T29661] RIP: 0033:0x45ca29 [ 1273.160658][T29661] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1273.180325][T29661] RSP: 002b:00007fa708562c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1273.188968][T29661] RAX: ffffffffffffffda RBX: 00000000004f5600 RCX: 000000000045ca29 [ 1273.196950][T29661] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1273.205006][T29661] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1273.213969][T29661] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1273.221931][T29661] R13: 000000000000071f R14: 00000000004ca0ab R15: 00007fa7085636d4 [ 1273.232113][T29661] Kernel Offset: disabled [ 1273.236579][T29661] Rebooting in 86400 seconds..