9] EXT4-fs (loop4): mount failed
08:46:05 executing program 0:

08:46:06 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:06 executing program 5:

08:46:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000068, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:06 executing program 0:

08:46:06 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffff8000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="cc7adefdcdd23d2dc8eb152fcf17e27338a229bec8263559157d37805bc186b6aa006b0c2b24f62c2ecbde2ec4c23041a648d971c4664458e4153867437321807f4f421ea9e35d5bf60c5a1de181973bc8f21a2e137c2e7c9dc5876a586dd49950f9651289f1cf245f9c821d01678fb11b670fcabfceda350a833908f1019bbb90cca1d8d7b26ec700b519d3aedab105d908d606faac8e51a39536d0d34373fc9eb0874818e0056feddce9b9b1083972a57f709b7900d6302862d37d0a455a827d371cf89c7a88bf818bd7978c1c31e19ce2c336f1022b6cb9f064430d48530ba35e5096716987", 0xe7, 0x4}, {&(0x7f0000000280)="a0d88279c2208201f70f7933c0bf992ef8d27d9eee587328ff8c5120d3d439e4895e898d5552d9467348d66b", 0x2c, 0x1000000000000000}], 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6a71666d743d76667376302c7461696c733d6f66662c745e696c733d736d616c6c2c68617415613d6f7264657265642c"])
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000380))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000003c0)={0xffff, 0x6, 0x9, 0x836b, 0x2})
write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10b)

[ 3324.619903] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3324.637265] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3324.664889] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3324.699260] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3324.717083] EXT4-fs (loop4): get root inode failed
[ 3324.726982] EXT4-fs (loop4): mount failed
[ 3324.764075] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "t^ils=small"
[ 3324.876150] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:07 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:07 executing program 0:
seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f0000000080)=[{0x20000000006, 0x0, 0x0, 0x407ffffffc}]})
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})

08:46:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)

08:46:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300006c, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:07 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000140)=""/92)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3325.014382] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3325.071487] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3325.131506] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3325.187089] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3325.231523] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:46:07 executing program 0:

[ 3325.290156] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3325.305929] EXT4-fs (loop4): get root inode failed
[ 3325.310952] EXT4-fs (loop4): mount failed
08:46:07 executing program 2:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140)="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", 0x1000, r0}, 0x68)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f00000011c0)='trusted.overlay.redirect\x00', &(0x7f0000001200)='./file0\x00', 0x8, 0x3)

[ 3325.557762] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3325.597738] nla_parse: 5 callbacks suppressed
[ 3325.597803] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:07 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:07 executing program 0:

08:46:07 executing program 5:

08:46:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000074, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:07 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2)
recvfrom$rose(r0, &(0x7f00000002c0)=""/189, 0xbd, 0x40, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x4, 0x69f83221d19478a0)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000180))
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000400))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000140)=0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x7, 0x7, 0x5})
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0)

[ 3325.687104] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3325.799817] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3325.835082] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3325.862263] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3325.880256] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3325.921475] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3325.941918] EXT4-fs (loop4): get root inode failed
[ 3325.965877] EXT4-fs (loop4): mount failed
[ 3326.112708] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:08 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3326.345565] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:08 executing program 0:

08:46:08 executing program 5:

08:46:08 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:08 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300007a, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:08 executing program 5:

[ 3326.458619] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3326.478807] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3326.502744] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:46:08 executing program 0:

[ 3326.531761] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3326.561235] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3326.580665] EXT4-fs (loop4): get root inode failed
[ 3326.608721] EXT4-fs (loop4): mount failed
[ 3326.790607] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3326.863063] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3327.418451] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3327.648522] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:09 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:09 executing program 5:

08:46:09 executing program 2:
r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x9, 0x0, 0x6, 0x3, 0x4, 0x8000, 0x6, 0xed61, 0xfffffffffffffffd, 0x23a9, 0x1ff, 0x2, 0xec85, 0x8001, 0x7fffffff, 0x1f}})
bind$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, {0x4, 0x0, 0xf810, 0x10000, 0x7, 0xfff}}, 0xa)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:09 executing program 0:

08:46:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x30000c0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3327.789636] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3327.875720] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3327.885023] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3327.895686] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3327.923993] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3327.943298] EXT4-fs (loop4): get root inode failed
[ 3327.952391] EXT4-fs (loop4): mount failed
[ 3328.037509] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:10 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:10 executing program 0:

08:46:10 executing program 5:

08:46:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x30000e5, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3328.084511] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:10 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = socket$isdn(0x22, 0x3, 0x1)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0))

08:46:10 executing program 0:

08:46:10 executing program 5:

[ 3328.292672] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3328.298939] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3328.325103] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3328.365511] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3328.426930] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3328.486344] EXT4-fs (loop4): get root inode failed
[ 3328.510191] EXT4-fs (loop4): mount failed
[ 3328.721460] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:11 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:11 executing program 0:

08:46:11 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
write$ppp(r0, &(0x7f0000000140)="2f100fa7962d90ca83cf68db733b9c", 0xf)

08:46:11 executing program 5:

08:46:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300022e, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3329.453196] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3329.487864] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3329.503616] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3329.542806] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3329.570727] EXT4-fs (loop4): get root inode failed
[ 3329.588048] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3329.588582] EXT4-fs (loop4): mount failed
08:46:11 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:11 executing program 0:

08:46:11 executing program 5:

08:46:11 executing program 2:
getpgrp(0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffff9c, 0x9)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000840)=<r0=>0x0)
r1 = getpgid(r0)
r2 = getpgrp(r1)
ptrace$getenv(0x4201, r2, 0x416, &(0x7f0000000380))
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-monitor\x00', 0xa840, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{<r5=>0x0}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000800)={r5, 0x1})
r6 = accept(0xffffffffffffffff, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80)
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000640)=@int=0xe678, 0x4)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={<r8=>0x0, 0xffffffffffffff05, 0x10000, 0x3}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e23, @multicast2}}, [0xc9, 0x1200000000000000, 0x1, 0x9, 0x3, 0x95, 0x6, 0xe83e, 0x7, 0x7f, 0x0, 0x800, 0x55, 0x100, 0x9]}, &(0x7f00000002c0)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @sack_perm, @window={0x3, 0x6, 0x406}, @mss={0x2, 0x100000001}, @timestamp], 0x5)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000340)=0x5)
write$P9_RLOCK(r7, &(0x7f0000000540)={0x8, 0x35, 0x1, 0x3}, 0x8)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e20, 0x8, @rand_addr="6a805045653dc6db1765611e953c93c0", 0x6}}, 0x9, 0x9, 0x3d9e, 0x100000000, 0xc1}, &(0x7f0000000480)=0x98)
write$FUSE_INIT(r7, &(0x7f00000004c0)={0x50, 0x0, 0x2, {0x7, 0x1d, 0x65, 0x200010, 0x2, 0x3, 0x80, 0x2}}, 0x50)
lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0))

08:46:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000300, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:12 executing program 0:

08:46:12 executing program 5:

[ 3330.029226] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3330.074903] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3330.119772] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3330.176942] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3330.213150] EXT4-fs (loop4): get root inode failed
[ 3330.230761] EXT4-fs (loop4): mount failed
[ 3330.882276] nla_parse: 6 callbacks suppressed
[ 3330.882291] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3330.924089] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3331.122359] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:13 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x40800, 0x0)
sendto$x25(r0, &(0x7f00000002c0)="8c6751f07c77c4933489026aec06b76d85be5d98d4a8b93dce8aeb0dc82f0b3e27cfff92f34ba2c1ca1c5d95010611eb8f1643794897eb1f723df10bcaabf630071aeb8cd94d363894985d57913fe4b52408896e880ea6f8a19a2bbb77f2c4ccb02cf35a666c54bf7771fd4222bf80400617a20f571d9dedaef232a866494d4e172f314660d4008de7ef65ffc41679424e1c9176c7ba45bea295d611d678376825c4edac9f9ab3a4394a1cce2b153ddf549c31cddb49dbd9bd74db51b4f35c15129aebddb4a2c946a4de6030399cc0e3c24eccfc3f9d7c8ff9969b358a47c0b8", 0xe0, 0x20048014, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000240)={0x6130})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x3, 0x3, 0x3f}, 0x3, 0x200, 'id0\x00', 'timer0\x00', 0x0, 0x1000, 0x1, 0x70f5, 0x4})

08:46:13 executing program 5:

08:46:13 executing program 0:

08:46:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000410, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3331.268759] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3331.277422] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3331.305937] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3331.337105] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3331.372165] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3331.393130] EXT4-fs (loop4): get root inode failed
[ 3331.399923] EXT4-fs (loop4): mount failed
08:46:13 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:13 executing program 0:

08:46:13 executing program 5:

08:46:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00'])
read$FUSE(r0, &(0x7f0000002740), 0x82)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='reno\x00\x81\x144\xba[2\xf3\xb7\x98n\xa8\xdd&\xe9\f\xea\x8f\x04Y\xa6>\x03\xf2p<\x91\xb9h\x05', 0x22)
write$FUSE_LK(r0, &(0x7f0000001b80)={0x28, 0x0, 0x2, {{0x7, 0x0, 0x1}}}, 0x28)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x5000)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x289e115fcdb16071, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req={0x80, 0x1314, 0x2, 0x5}, 0x10)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='5\xbe\aa\xd0', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x10000003, 0x0)

08:46:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000437, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3331.531432] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:13 executing program 5:

08:46:13 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0)

[ 3331.667112] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3331.741287] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3331.794328] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3331.855676] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3331.922918] EXT4-fs (loop4): get root inode failed
[ 3331.953123] EXT4-fs (loop4): mount failed
[ 3332.144649] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3332.182973] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3332.628104] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3332.849881] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:15 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:15 executing program 5:

08:46:15 executing program 2:
r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000180)={0xffffffff7fffffff, 0x4, 0x4, 0x778, <r1=>0x0}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x20, 0xbe91, 0x2, 0x36e, 0x16, 0xfff, 0x6, 0x6, r1}, &(0x7f0000000240)=0x20)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:15 executing program 0:

08:46:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000438, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3333.094857] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3333.122758] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3333.142751] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3333.176425] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3333.197877] EXT4-fs (loop4): get root inode failed
[ 3333.209017] EXT4-fs (loop4): mount failed
[ 3333.221243] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:15 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:15 executing program 0:

08:46:15 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000180)={0xffffffffffffffe0, 0x1, 0x2, 0x0, &(0x7f0000000140)=[{}]})

08:46:15 executing program 5:

08:46:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000500, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3333.409017] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
08:46:15 executing program 0:

08:46:15 executing program 5:

[ 3333.458829] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3333.495434] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3333.559319] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3333.621757] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3333.647360] EXT4-fs (loop4): get root inode failed
[ 3333.652698] EXT4-fs (loop4): mount failed
[ 3333.990115] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:16 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:16 executing program 0:

08:46:16 executing program 5:

08:46:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x13244d91c6d33976, 0x0, 0x3, 0x0)

08:46:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000600, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3334.803184] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3334.825732] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3334.847839] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3334.878065] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3334.911429] EXT4-fs (loop4): get root inode failed
[ 3334.918057] EXT4-fs (loop4): mount failed
08:46:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:17 executing program 5:

08:46:17 executing program 0:

08:46:17 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8, 0x10040)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000140)={<r1=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={r1})
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffff7300000084310914dca12643b74b57887a0db0a21c0ca70804930bae3cbe97e5666a85770b47b6090ce4dfed90679dc66a02f334dc54986932e2358b022c0527fc6545e7f4611c1e8cdb9dc53eca0a7a56401318b8b1bb5bbf36a8d658715ec7a29def810e7cb965b945162e2be620b7c58693dc54b2d0972d8a8ab6a69cf7ec7669c60c32af1fece455e5f6d9e4a747007dd798e629a9a2d17b4f8055069ea4a7a6f8dd99f9325b1d4f74e4d0204326e0faed52267815a7d43e1a"])
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000700, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:17 executing program 0:

08:46:17 executing program 0:

[ 3335.304772] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3335.392098] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3335.446667] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3335.542336] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3335.578965] EXT4-fs (loop4): get root inode failed
[ 3335.598543] EXT4-fs (loop4): mount failed
[ 3336.068059] nla_parse: 6 callbacks suppressed
[ 3336.068069] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:18 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:18 executing program 5:

08:46:18 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200, 0x0)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x10001)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:18 executing program 0:

08:46:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000900, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3336.284399] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3336.422707] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3336.464660] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3336.465623] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3336.495662] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3336.534645] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3336.572116] EXT4-fs (loop4): get root inode failed
[ 3336.585879] EXT4-fs (loop4): mount failed
[ 3336.700992] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:18 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6501, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:18 executing program 0:

08:46:18 executing program 5:

08:46:18 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0)
ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000140))
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000180)={0x2, 0xfffffffffffffffe})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000a00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:19 executing program 0:

08:46:19 executing program 5:

[ 3336.932552] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3336.946730] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3336.972249] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3336.999881] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3337.051168] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3337.090558] EXT4-fs (loop4): get root inode failed
[ 3337.106116] EXT4-fs (loop4): mount failed
[ 3337.338943] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3337.414027] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3337.822607] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3338.018645] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:20 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6501, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:20 executing program 5:

08:46:20 executing program 0:

08:46:20 executing program 2:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1)
execveat(r0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='{\x00', &(0x7f00000002c0)='em1]vmnet0)bdev\x00', &(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='}\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='+vmnet0::\\ppp1cgroup-\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='((ppp0ppp0\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='selinuxsecurityprocem0^\x00', &(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='\'userposix_acl_access(\x00'], 0x800)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
get_thread_area(&(0x7f00000006c0)={0x7f, 0x20101000, 0x5000, 0x1, 0x10000, 0x7, 0xfffffffffcc31b1e, 0x7, 0xad50, 0xffffffffffffffff})

08:46:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000c00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3338.155778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3338.204722] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3338.206736] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3338.244663] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3338.292902] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3338.311739] EXT4-fs (loop4): get root inode failed
[ 3338.317453] EXT4-fs (loop4): mount failed
[ 3338.413967] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:20 executing program 5:

08:46:20 executing program 0:

08:46:20 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3001004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:20 executing program 5:

08:46:20 executing program 0:

[ 3338.609069] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3338.676945] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3338.696222] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3338.712073] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 3338.754935] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3338.811841] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3338.836942] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3338.876369] CPU: 1 PID: 13494 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3338.883378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3338.892841] Call Trace:
[ 3338.895459]  dump_stack+0x172/0x1f0
[ 3338.899136]  dump_header+0x15e/0x929
[ 3338.902878]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3338.908022]  ? ___ratelimit+0x60/0x595
[ 3338.911931]  ? do_raw_spin_unlock+0x57/0x270
[ 3338.916365]  oom_kill_process.cold+0x10/0x6f5
[ 3338.921014]  ? task_will_free_mem+0x139/0x6e0
[ 3338.925532]  ? find_held_lock+0x35/0x130
[ 3338.929627]  out_of_memory+0x936/0x12d0
[ 3338.933627]  ? lock_downgrade+0x810/0x810
[ 3338.937805]  ? oom_killer_disable+0x280/0x280
[ 3338.942318]  ? find_held_lock+0x35/0x130
[ 3338.946416]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3338.951286]  ? memcg_event_wake+0x230/0x230
[ 3338.955636]  ? do_raw_spin_unlock+0x57/0x270
[ 3338.960072]  ? _raw_spin_unlock+0x2d/0x50
[ 3338.964249]  try_charge+0x1028/0x15b0
[ 3338.968073]  ? find_held_lock+0x35/0x130
[ 3338.972168]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3338.977087]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3338.981961]  ? find_held_lock+0x35/0x130
[ 3338.986062]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3338.990983]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3338.995684]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3339.000200]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3339.005070]  memcg_kmem_charge+0x136/0x300
[ 3339.009334]  __alloc_pages_nodemask+0x3c6/0x760
[ 3339.014026]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3339.019069]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3339.023751]  ? trace_hardirqs_on+0x67/0x230
[ 3339.028084]  ? kasan_check_read+0x11/0x20
[ 3339.032250]  copy_process.part.0+0x3e0/0x7970
[ 3339.036758]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3339.041872]  ? delayacct_end+0x5c/0x100
[ 3339.045855]  ? __delayacct_freepages_end+0xe0/0x140
[ 3339.050892]  ? __lock_acquire+0x6eb/0x48f0
[ 3339.055164]  ? __cleanup_sighand+0x70/0x70
[ 3339.059417]  ? mark_held_locks+0x100/0x100
[ 3339.063677]  _do_fork+0x257/0xfe0
[ 3339.067143]  ? fork_idle+0x1d0/0x1d0
[ 3339.070869]  ? blkcg_print_stat+0xb90/0xb90
[ 3339.075368]  ? kasan_check_read+0x11/0x20
[ 3339.079525]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3339.084291]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3339.089054]  ? do_syscall_64+0x26/0x610
[ 3339.093042]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3339.098415]  ? do_syscall_64+0x26/0x610
[ 3339.102398]  __x64_sys_clone+0xbf/0x150
[ 3339.106385]  do_syscall_64+0x103/0x610
[ 3339.110287]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3339.115486] RIP: 0033:0x45b5f9
[ 3339.118681] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 3339.137590] RSP: 002b:00007fff4a8c69e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 3339.145401] RAX: ffffffffffffffda RBX: 00007f9926b11700 RCX: 000000000045b5f9
[ 3339.152704] RDX: 00007f9926b119d0 RSI: 00007f9926b10db0 RDI: 00000000003d0f00
[ 3339.159995] RBP: 00007fff4a8c6bf0 R08: 00007f9926b11700 R09: 00007f9926b11700
[ 3339.167283] R10: 00007f9926b119d0 R11: 0000000000000202 R12: 0000000000000000
[ 3339.174573] R13: 00007fff4a8c6a9f R14: 00007f9926b119c0 R15: 000000000073bfac
[ 3339.200101] EXT4-fs (loop4): get root inode failed
[ 3339.221087] EXT4-fs (loop4): mount failed
[ 3339.341725] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3339.385478] Task in /syz3 killed as a result of limit of /syz3
[ 3339.392918] memory: usage 307180kB, limit 307200kB, failcnt 3789
[ 3339.425216] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3339.444993] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3339.469778] Memory cgroup stats for /syz3: cache:56KB rss:168020KB rss_huge:155648KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:167988KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3339.513899] Memory cgroup out of memory: Kill process 6688 (syz-executor.3) score 1110 or sacrifice child
[ 3339.534760] Killed process 6688 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB
[ 3339.560033] oom_reaper: reaped process 6688 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB
[ 3339.571318] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3339.603957] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:22 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:22 executing program 5:

08:46:22 executing program 0:

08:46:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3002000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{r0}, {r0, 0x84}], 0x2, 0x7)
syz_mount_image$ext4(&(0x7f0000000100)='e\x8ct4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xff72, 0x0, 0x3, 0x0)

[ 3340.264934] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3340.288176] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3340.316001] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3340.366324] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3340.394269] EXT4-fs (loop4): get root inode failed
[ 3340.404988] EXT4-fs (loop4): mount failed
08:46:22 executing program 0:

08:46:22 executing program 5:

08:46:22 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:22 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6601, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3002200, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:22 executing program 5:

[ 3340.621248] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3340.638408] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3340.669650] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3340.706293] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:46:22 executing program 0:

[ 3340.734515] EXT4-fs (loop4): get root inode failed
[ 3340.749852] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3340.770453] EXT4-fs (loop4): mount failed
[ 3341.114767] nla_parse: 4 callbacks suppressed
[ 3341.114797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3341.195318] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3341.572954] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3341.639094] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3341.859997] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:24 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6601, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:24 executing program 5:

08:46:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3002300, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:24 executing program 0:

08:46:24 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20000, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)

08:46:24 executing program 5:

08:46:24 executing program 0:

[ 3342.107417] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
08:46:24 executing program 5:

[ 3342.152401] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3342.161174] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3342.181706] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3342.233753] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3342.295995] EXT4-fs (loop4): get root inode failed
[ 3342.315691] EXT4-fs (loop4): mount failed
[ 3342.390193] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:24 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:24 executing program 0:

08:46:24 executing program 5:

08:46:24 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20000, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10)

[ 3342.683233] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3342.995312] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3343.073468] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3343.464890] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3343.519773] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:25 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:25 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3002c00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:25 executing program 0:

08:46:25 executing program 5:

08:46:25 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000001c0)={0x3})
splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000140), 0xe2b, 0x8)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:26 executing program 0:

08:46:26 executing program 5:

[ 3343.872365] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3343.883972] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3343.908539] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3343.928137] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3343.949904] EXT4-fs (loop4): get root inode failed
[ 3343.959573] EXT4-fs (loop4): mount failed
08:46:26 executing program 0:

[ 3343.982845] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3344.090246] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:26 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6701, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3002d00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:26 executing program 5:

08:46:26 executing program 0:

[ 3344.326915] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3344.368558] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3344.395730] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3344.441590] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3344.489932] EXT4-fs (loop4): get root inode failed
[ 3344.509027] EXT4-fs (loop4): mount failed
08:46:27 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6701, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:27 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x4d4503, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x41000, 0x0)

08:46:27 executing program 5:

08:46:27 executing program 0:

08:46:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3002e02, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:27 executing program 5:

08:46:27 executing program 0:

08:46:27 executing program 5:

[ 3345.693536] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3345.709125] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3345.741257] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3345.792349] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3345.848607] EXT4-fs (loop4): get root inode failed
[ 3345.864230] EXT4-fs (loop4): mount failed
08:46:28 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:28 executing program 0:

08:46:28 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140))
syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x9, 0x100)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:28 executing program 5:

[ 3346.190427] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3346.283039] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3346.548201] nla_parse: 7 callbacks suppressed
[ 3346.548230] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3346.589217] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3347.154038] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3347.390892] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:29 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3003704, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:29 executing program 5:

08:46:29 executing program 0:

08:46:29 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x3, @output={0x1000, 0x1, {0xb8b2, 0x80000001}, 0x600000, 0x4}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='e\x99t4\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x400, 0x0)

08:46:29 executing program 5:

08:46:29 executing program 0:

[ 3347.560201] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3347.624710] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3347.641658] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3347.695143] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3347.744329] EXT4-fs (loop4): get root inode failed
08:46:29 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 3347.770600] EXT4-fs (loop4): mount failed
[ 3347.871301] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3347.918598] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:30 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6801, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:30 executing program 5:

08:46:30 executing program 0:

08:46:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3003804, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3348.036169] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3348.063194] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3348.103726] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3348.159118] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3348.181661] EXT4-fs (loop4): get root inode failed
[ 3348.193837] EXT4-fs (loop4): mount failed
[ 3348.503841] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3348.575318] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3349.033433] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3349.201341] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:31 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6801, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:31 executing program 2:
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0xc4000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140))
sendmsg$inet_sctp(r0, &(0x7f0000001540)={&(0x7f0000000040)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000080)="1e06ecdd0624bf3549baad6019bebc808b2469aa2be89826d70d87df3a", 0x1d}, {&(0x7f0000000180)="3c86daf81a763dd1bd36da28b0f93cd783ac8f3a5924f02d2e7f830d1c12a4a39c7fa6031092bab93a9735f2241e2feb58635de926d08e26a8d2640d0ae3ca242dede20662fe15614b5d0327ec3cfe7a62e7507cd1b00829523f596c377996fb0e77252cb5923743403d165e209a3fbdcd9f73", 0x73}, {&(0x7f0000000200)="dfef9df906e296ceba6a7dce6ac496e379fe90ab9cb144ac65ba1490c87e045be49efa9adb9f3f893b6aa8d60fa596d86b703c9caee918a157d10e507036dfb995deefde4ead03af3780a0d84c1e386ca4633eb1991f2690bb2aadedf43853f4eb52bebc2dfc3d496f45720a124f23ddf6a3823db27699b55eb117e0db1cbbf16b43e2d055cbcb79e8efb0e5617dec3a81265db91c0d581dc31ffadde606bfd801a2db6f4ebe89447a7c72a18118b60dd123e00c31333e5bc7219735a5e1881aac9f93dd86c7da635db781caaa21ff7c6a9e93ba794d7c", 0xd7}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="de21e015960bc2e8434139193f0d01a4097a2160994639e9d1f85cd08483a3279161f62b68bd58dbacd3f98e3e80095ce0654c970d5d8b98c458376538556bfe07e31c5a872dcbb3c0c50b1725eb711994abe99eb6167f240366b0dc1885", 0x5e}, {&(0x7f0000001380)="3d2ae793cd11ab9bc6c0d6dc106ca41a092692661658c9df2a70cc9fc30f6e820169aebde77bd657823b98d090b1be8dcd090652f3c3a50c6ab1aa7242ff8eeb1619839ed9008c4ec0d06cf8d78a883d0ba318e9d6be501b14727bcbcfd2", 0x5e}, {&(0x7f0000001400)="ad0c653249a46c74d8c69c9f", 0xc}], 0x7, &(0x7f00000014c0)=[@authinfo={0x18, 0x84, 0x6, {0xfb0f}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffffffffffffe}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="efadc4a005f28c5ede62793dd60a0167"}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x68, 0x24000014}, 0x4000000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:31 executing program 5:

08:46:31 executing program 0:

08:46:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3003f00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:31 executing program 0:

08:46:31 executing program 5:

[ 3349.363232] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3349.387480] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3349.421788] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3349.456989] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:46:31 executing program 0:

[ 3349.494857] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3349.513203] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3349.539329] EXT4-fs (loop4): get root inode failed
[ 3349.552481] EXT4-fs (loop4): mount failed
[ 3349.678724] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:31 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:31 executing program 5:

08:46:31 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/223)

08:46:31 executing program 0:

[ 3350.011878] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:32 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3004000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:32 executing program 0:

08:46:32 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:46:32 executing program 2:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00')

08:46:32 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x480400, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180))
syz_open_pts(r1, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x0)

[ 3350.489713] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3350.529327] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3350.544732] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3350.594294] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3350.657243] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3350.672622] EXT4-fs (loop4): get root inode failed
[ 3350.678474] EXT4-fs (loop4): mount failed
08:46:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3004800, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3351.048213] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3351.058276] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3351.078277] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:46:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0463044000000000076304400000000000"], 0x0, 0x0, 0x0})

[ 3351.093953] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3351.144886] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3351.178291] EXT4-fs (loop4): get root inode failed
[ 3351.194396] EXT4-fs (loop4): mount failed
[ 3351.224304] binder: 13820:13821 unknown command 0
[ 3351.229702] binder: 13820:13821 ioctl c0306201 20000680 returned -22
[ 3351.693054] nla_parse: 4 callbacks suppressed
[ 3351.693065] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:33 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6901, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9, 0x20000)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
timerfd_settime(r0, 0x1, &(0x7f0000000180)={{r1, r2+30000000}, {0x0, 0x1c9c380}}, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0463044000000000076304400000000000"], 0x0, 0x0, 0x0})

08:46:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3004c00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3351.846704] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3351.881429] binder: 13828:13834 unknown command 0
[ 3351.897178] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3351.936813] binder: 13828:13834 ioctl c0306201 20000680 returned -22
[ 3351.948888] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3352.019269] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3352.046864] EXT4-fs (loop4): get root inode failed
[ 3352.057541] EXT4-fs (loop4): mount failed
[ 3352.062057] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3352.103623] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:34 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6901, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
process_vm_readv(0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/4096}, {&(0x7f0000002280)=""/29}, {&(0x7f00000022c0)=""/214}, {&(0x7f00000023c0)=""/242}, {&(0x7f00000024c0)=""/161}, {&(0x7f0000002580)=""/180}], 0x10fc, &(0x7f0000001140)=[{&(0x7f00000026c0)=""/30, 0x1e}], 0x1, 0x0)

08:46:34 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x1)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={<r1=>0x0, 0xa9, 0x8, [0x4, 0x120000000, 0x99b2, 0x12e9b55b, 0x8, 0x80000000, 0x5, 0x1]}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0xfffffffffffeffff}, &(0x7f0000000200)=0x8)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xfffffffffffffe32)

08:46:34 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:46:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3006000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3352.514469] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3352.524125] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3352.534135] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3352.579272] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3352.601953] EXT4-fs (loop4): get root inode failed
[ 3352.615540] EXT4-fs (loop4): mount failed
08:46:34 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000340)={{0xffffffffffff8000, 0x7fffffff}, {0x3, 0x4}, 0x1, 0x4, 0x20})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
waitid(0x2, r1, &(0x7f0000000140), 0x81000003, &(0x7f00000001c0))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r3, r4})

08:46:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3006800, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3352.850839] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3352.888880] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3352.923273] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3352.962227] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3352.989514] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3353.022755] EXT4-fs (loop4): get root inode failed
08:46:35 executing program 0:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xfffffe77)
unlink(&(0x7f0000000240)='./file0\x00')
clone(0x6100001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x35}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r3}, 0x10)

[ 3353.039451] EXT4-fs (loop4): mount failed
[ 3353.194163] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3353.678157] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:36 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6a00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:36 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='e\xf8t\xc9\xc7', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:36 executing program 5:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab08, 0xffffffffffffffff)

08:46:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3006c00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3353.891249] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3353.978139] block nbd0: NBD_DISCONNECT
[ 3353.996391] block nbd0: NBD_DISCONNECT
[ 3354.086912] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3354.163438] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3354.212302] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3354.271987] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3354.296740] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3354.323168] EXT4-fs (loop4): get root inode failed
[ 3354.344929] EXT4-fs (loop4): mount failed
[ 3354.507702] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:36 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6a00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:36 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000040)={0x1f, 0x0, 0x10000})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000080)=@random={'trusted.', 'lo-!self)!cgroupmime_type\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001840)={0x53, 0x0, 0xb, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001740)="27d16347a54151f1908ef3", 0x0, 0x8c, 0x31, 0x2, 0x0})
unshare(0x40000000)

08:46:36 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0)

08:46:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3007400, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:36 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0x3})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
ioctl$CAPI_INSTALLED(r0, 0x80024322)

08:46:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
prlimit64(0x0, 0x3, &(0x7f0000000040)={0x0, 0xfffffffffffffffe}, 0x0)

[ 3354.781764] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3354.803159] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3354.827409] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3354.866105] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3354.898687] EXT4-fs (loop4): get root inode failed
[ 3354.924896] EXT4-fs (loop4): mount failed
08:46:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3355.020916] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}})

[ 3355.190613] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3355.620786] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:38 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6a01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:38 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3007a00, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:38 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0xf1cf09d02ed3ff81, 0x200)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f00000001c0)=""/74)
r1 = accept4$vsock_stream(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x80800)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/73, &(0x7f0000000000)=0x49)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0)

[ 3355.992753] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3356.019382] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3356.030311] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3356.072736] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3356.093176] EXT4-fs (loop4): get root inode failed
[ 3356.103748] EXT4-fs (loop4): mount failed
08:46:38 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6a01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:38 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

08:46:38 executing program 0:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x881806)
set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x1c, 0x0, 0x200}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c091)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4d7b, 0x800000000105082)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0)
sendfile(r1, r1, &(0x7f00000ddff8), 0x10200000e)

08:46:38 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300c000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:38 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="c48e55655ebb568b391126fe3c90d8bd"}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")

08:46:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3356.610983] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3356.637710] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3356.669872] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3356.734134] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:46:38 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x40)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000140)={0x2, 0x0, [], {0x0, @reserved}})
mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0xff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3356.823839] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3356.889912] EXT4-fs (loop4): get root inode failed
[ 3356.914167] EXT4-fs (loop4): mount failed
[ 3357.035764] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3357.104057] nla_parse: 3 callbacks suppressed
[ 3357.104090] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3357.127609] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3357.467617] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3357.637866] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:39 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:39 executing program 0:
r0 = epoll_create1(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
shutdown(r1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180))

08:46:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300e500, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3357.743222] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3357.810342] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3357.832600] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3357.886269] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3357.905485] EXT4-fs (loop4): get root inode failed
[ 3357.910660] EXT4-fs (loop4): mount failed
[ 3357.943727] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:40 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:40 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0xff6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x7e43ae2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f0000000140)='\x00\x00\x00\x00@', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0xffffffffffffffe1, 0x6, 0xffffffff80000001, 0x5d, 0x0, 0x0, 0x2, 0x4, 0x100000000, 0x5596, 0x8, 0x1, 0xffff, 0x1, 0x3, 0xffffffffffff4a35, 0x3ff, 0x3, 0x3f, 0x8, 0x100000001, 0xfffffffffffffffc, 0x0, 0x8, 0xfffffffffffffffd, 0x4000000000000000, 0x3, 0x80000001, 0x1000, 0x200, 0x3, 0x400, 0x10000, 0x7, 0x8, 0x8, 0x0, 0x0, 0x3, @perf_config_ext={0xb7, 0x8}, 0x1, 0x80000000, 0x8000, 0x0, 0x2, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0xa)

08:46:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0)

08:46:40 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300ff0f, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3358.008730] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3358.140298] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
08:46:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup2(r1, r2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[ 3358.181005] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:46:40 executing program 2:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001740)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000019c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001980)='/dev/dlm_plock\x00', 0x10000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001880)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000001840)=0xe8)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001700)='/dev/autofs\x00', 0x2, 0x0)
getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000001640), &(0x7f0000001680)=0x4)
r3 = getuid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000016c0))
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x9, &(0x7f0000001540)=[{&(0x7f0000000180)="ad37921e7d1fa82e5923b5168c6ee05e350f26b1c0", 0x15, 0x95c}, {&(0x7f00000001c0)="3b86", 0x2, 0xb4}, {&(0x7f0000000200)="f140756c66f3631b790f6b11fa96dbfd5c1ec00bd583863934737973d2eb472077ef37f17ae6e052e293d3925e2ef170345ae1c4eb9d094c468744dd1505aa9d8a5086674f4f62e51e8530e8bd94bc945c86ac10c18746a372b8181c02a8cbf7196d77b9d87987bc2be11918808d9ea1530ffbb3cf886d65b285c4659313a84dad8f8bb02c15281df71a292bc7288ff1841606656d328df653f7834683", 0x9d, 0x400}, {&(0x7f00000002c0)="22f4918a24d0f786caf7ee99962c99a6f93e5f96a8fa7df418725b26b21b89a1f6025e725e30a9eaa5ef8ded52558981f2981b60a0e294e827f86e2d14d4f2833ebca4ae1aae0995e96071df4e1cf993b3dd018e1708de449bd5c9efacefac9421fa1165ca7908c788996cfd0c8b051e0e5521bd9c3b2a8657ba5d73b9a3d54133b883d42d7b238557c02b5de309c72ff846b958ce62b326fe8ee41baeda0dd66dda0d9e6c4c836f44b7f91ff27f1b9e359bce2516a8", 0xb6, 0x4}, {&(0x7f0000000380)="c6b2e8b0cb4185515e63ce3f7aa4deda6d4120e4e8b31ebe5e8496cb13db9447d1bd012145a839255fd473a243ca0df54baba6c631cd36765b20db91fae6f97ce151ebb304bb1747e703624f95c6257e7f75a128dcde9718ab4db35f55d15fddc36e96687a13b2ad667e2de8375c28762c659d18376e755a278361b1e7da13187ab3fb9c15c0a99546793d35866f24c2d7541e432c8963c0b5aa668983b95f902d2636b544118bd883579273a8228c49a15a6a76a37a0e2f7db82dfa88c083b28cb3d143155a32cd3165fd40229a61cc8cb98278c6d601f3d5aa7da80dd7b8cbc467fd3e1ff77ae1817e26589efe1c36b0159409", 0xf4, 0xb6}, {&(0x7f0000000480)="f86f8b59727fbaaeab3937113f8cb1d62af0b4c94a3921e43fbbf9244aaaeeb76adccf55532172c67c87b01c8d7506006dbc59336ec6", 0x36, 0x80}, {&(0x7f00000004c0)="2d935174459a0d8ce5b7fd1e33f0dd6f", 0x10, 0x100000001}, {&(0x7f0000000500)="bdd3334a8fce5a69023dde57f9fd5e54bef8af9839eb55b264cc12ad4cdcfc1bffd818417926", 0x26, 0x191}, {&(0x7f0000000540)="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", 0x1000, 0xb1c}], 0x40, &(0x7f0000001780)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@max_batch_time={'max_batch_time', 0x3d, 0x80000000}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@euid_lt={'euid<', r3}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, '+posix_acl_access/'}}]})

[ 3358.229647] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3358.302325] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:46:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3358.344221] EXT4-fs (loop4): get root inode failed
[ 3358.368092] EXT4-fs (loop4): mount failed
[ 3358.825150] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3359.193310] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3359.390760] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:41 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:41 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="070100000d0000000000000000000000000000000300000005068ab22663a8977384ee69e48a85f8cfed7dfd"], 0x2c)

08:46:41 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x60a000, 0x0)
sendto$inet(r0, &(0x7f0000000280)="6dfaf1ccb74716468d1b17275af89038de8f89cd97b3a8e35d143fd8a3d7bfd7c072fcc7141669f2225229506bb630fe3290b0eef92d6d85edec983cf6e943fbbfc6c541d13ffdf956b12a5244818d99f1d8bcde1c018f7ea3acfe6b5d5d2e19", 0x60, 0x20040081, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd7}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e59}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c091)
r2 = request_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='GPL.:md5sum*@:systemcpusetsystem\x00', 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffff10, 0x0, 0x3, 0x0)

[ 3359.541672] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3359.571207] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3359.598624] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3359.643120] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3359.667477] EXT4-fs (loop4): get root inode failed
[ 3359.684142] EXT4-fs (loop4): mount failed
[ 3359.728635] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3359.810956] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:42 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:42 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000240))

08:46:42 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3360.061836] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
08:46:42 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$TCSETX(r0, 0x5433, &(0x7f00000001c0)={0x557, 0xfffffffffffffff7, [0xbe7d, 0x0, 0xffffffff, 0x3, 0x401], 0x10001})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x1, 0x0)
ioctl$TCSETX(r1, 0x5433, &(0x7f0000000140)={0x100000000, 0x0, [0x9, 0x0, 0xe3, 0x4, 0x535], 0x8})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3360.105817] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3360.142953] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3360.186867] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3360.223048] EXT4-fs (loop4): get root inode failed
[ 3360.242034] EXT4-fs (loop4): mount failed
08:46:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:42 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3360.373809] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:42 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)

[ 3360.509356] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3360.551287] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3360.574688] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3360.599998] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3360.633938] EXT4-fs (loop4): get root inode failed
[ 3360.645587] EXT4-fs (loop4): mount failed
[ 3360.729270] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:43 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:43 executing program 0:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab02, 0xffffffffffffffff)

[ 3361.518103] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3361.551444] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3361.597897] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3361.645120] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3361.680207] EXT4-fs (loop4): get root inode failed
[ 3361.694578] EXT4-fs (loop4): mount failed
08:46:43 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:43 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000001c0))
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

08:46:43 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
readv(r0, &(0x7f0000001240)=[{&(0x7f0000001340)=""/128, 0x80}], 0x1)
signalfd(r1, &(0x7f0000000080), 0x8)

08:46:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x14000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3362.015721] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3362.049371] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3362.096285] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:46:44 executing program 0:
r0 = epoll_create1(0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580))
getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000240))

[ 3362.174419] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:46:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3362.240527] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:46:44 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2000, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0), 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3362.331900] EXT4-fs (loop4): get root inode failed
[ 3362.379269] EXT4-fs (loop4): mount failed
[ 3362.593855] nla_parse: 5 callbacks suppressed
[ 3362.593904] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3362.998956] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3363.241784] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:45 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6c01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:45 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x4)
getsockname$netlink(r1, &(0x7f00000002c0), &(0x7f0000000340)=0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/47, 0x2f)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000380)=0x14)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000300), 0x4)
pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f845319db506bf00630e4a6a6b3509617ebd1412f38f1280247db2f0538fcf16e4bc774af571af9b0cafb838e2c0", 0x2e}], 0x1, 0x15)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:46:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2d000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3363.399465] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3363.434498] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3363.465844] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3363.523646] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3363.572426] EXT4-fs (loop4): get root inode failed
[ 3363.595539] EXT4-fs (loop4): mount failed
[ 3363.610704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:45 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6c01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:45 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7fffffff, 0x274101)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x1, 0xff, 0x6})

08:46:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:45 executing program 0:
r0 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/186, 0x10}}], 0x4000000000000e9, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x5)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0)

08:46:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x65000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3363.722565] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3363.906828] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3363.934797] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3363.957661] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:46:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3364.013313] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3364.092225] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:46:46 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, <r3=>0x0}, &(0x7f0000000340)=0xc)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000500)=0xe8)
syz_mount_image$nfs(&(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='./file0\x00', 0x2, 0x5, &(0x7f0000000c00)=[{&(0x7f00000008c0)="ed11c53d4c6a47f50fe33a86b8402bf5d1ad37972d58141d7bf2b3fabba12a0461c9d95574", 0x25, 0x100000001}, {&(0x7f0000000900)="53db1c0f5d36299d729df4d1ac4c36749e6b032180411082d1e8fb59a89da70074ace486b7e5ba2ebf2afeb3ac45a9b6db944848e7895f97c76164b3869afac695c8337e0d62d0929101ca94b4d0a8efc5a8a3205968b70ebe70c36394c6ec5d5af75fff007b14b8a6b4ccbc0606d708d7852fe086c1bf785c8a0b31146755db7f5d8483cbb08c", 0x87, 0xc6}, {&(0x7f00000009c0)="af680893638c83c9486120e1cc6bb9154dddfc20efa21bb585abc952ad1758404ee18286bece75976ad114f5e1304daadcd97c20fde44f68ba8047a367b9dce160df41d94a442da559ce13f8db25aaa3ddb3b9675e54447c7c1a61bbbdcbfb4a851d2958f0cce4ebe127c04e8e06cc3d4428b05c35e4e8a309762e86ca68ca2e322770636302fc7f38c50b3ce88eb6947d16491e9cedf57288b351e44016d42f5ff5b72217d9108643cabb261f3a22f11567cf8f7b627828400257423d29e1836d917e9ca7c1ad5383cd59465ef7b213f56d4caf738156a27e8dd942c1deac3ab3555f5feae165293eb60c671e4c7ae130736bfd87c9ab10", 0xf8, 0x4}, {&(0x7f0000000ac0)="1b05e54b96cb82b30448514b25cf230085f2ee9e5c48bc8fe474e30b86c27f0725c35a934884dd6cacab0e4dfb027fa0b03b701c2b00eb6aff20ee4823ada9a5c106c1b63a57a4bae882db23195562", 0x4f, 0x1000000000}, {&(0x7f0000000b40)="742bf275f0438e23405f370246b83d5604b088feeb1631e4c8bc504c82169dd730bca8b81af4a6f25409ea41fed364028130c389813ae1c97b019912d17a9973bba055e08c1955a6ffba6a270e5ce9573d6897968c6af957ff2430a3efba443124a4bfbd6f21dadb4cf57731a9e4efae5f05dc1065993ab0345f8aa1dcd2d05e1ff1789e0692956b517ff98fcdf08403278b79e782e068df21e698db1745a51024533c6ab8adc80355", 0xa9, 0xffffffff}], 0x1000000, &(0x7f0000000c80)='ppp1+\x00')
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540)={0x0, <r7=>0x0}, &(0x7f0000000580)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8)
stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r1}, {0x2, 0x1, r2}, {0x2, 0x3, r3}, {0x2, 0x1, r4}, {0x2, 0x7, r5}, {0x2, 0x1, r6}, {0x2, 0x1, r7}, {0x2, 0x7, r8}], {0x4, 0x5}, [{0x8, 0x2, r9}], {0x10, 0x4}}, 0x6c, 0x2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3364.186121] EXT4-fs (loop4): get root inode failed
[ 3364.235489] EXT4-fs (loop4): mount failed
08:46:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818220196dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)

[ 3364.573543] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3364.871991] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:47 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6d00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xd0030000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:47 executing program 2:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x407ffd, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x1, 0x20000)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000002c0)=0x4, 0x4)

[ 3365.119367] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3365.212388] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3365.247694] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3365.255767] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3365.281932] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3365.347177] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3365.349053] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 3365.373847] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3365.389750] EXT4-fs (loop4): get root inode failed
[ 3365.411279] EXT4-fs (loop4): mount failed
[ 3365.422086] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3365.433510] CPU: 1 PID: 15749 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3365.440505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3365.449967] Call Trace:
[ 3365.449992]  dump_stack+0x172/0x1f0
[ 3365.450015]  dump_header+0x15e/0x929
[ 3365.450043]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3365.450065]  ? ___ratelimit+0x60/0x595
[ 3365.461549]  ? do_raw_spin_unlock+0x57/0x270
[ 3365.461581]  oom_kill_process.cold+0x10/0x6f5
[ 3365.461600]  ? task_will_free_mem+0x139/0x6e0
[ 3365.461621]  ? find_held_lock+0x35/0x130
[ 3365.479547]  out_of_memory+0x936/0x12d0
[ 3365.479575]  ? lock_downgrade+0x810/0x810
[ 3365.479596]  ? oom_killer_disable+0x280/0x280
[ 3365.500819]  ? find_held_lock+0x35/0x130
[ 3365.504944]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3365.509839]  ? memcg_event_wake+0x230/0x230
[ 3365.514211]  ? do_raw_spin_unlock+0x57/0x270
[ 3365.518653]  ? _raw_spin_unlock+0x2d/0x50
[ 3365.522834]  try_charge+0x1028/0x15b0
[ 3365.526662]  ? find_held_lock+0x35/0x130
[ 3365.530759]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3365.535640]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3365.540512]  ? find_held_lock+0x35/0x130
[ 3365.544612]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3365.549497]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3365.554189]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3365.554211]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3365.554230]  memcg_kmem_charge+0x136/0x300
[ 3365.554249]  __alloc_pages_nodemask+0x3c6/0x760
[ 3365.572574]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3365.577962]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3365.582579]  ? trace_hardirqs_on+0x67/0x230
[ 3365.587358]  ? kasan_check_read+0x11/0x20
[ 3365.587381]  copy_process.part.0+0x3e0/0x7970
[ 3365.587400]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3365.587415]  ? delayacct_end+0x5c/0x100
[ 3365.587431]  ? __delayacct_freepages_end+0xe0/0x140
[ 3365.587449]  ? __lock_acquire+0x6eb/0x48f0
[ 3365.587474]  ? __cleanup_sighand+0x70/0x70
[ 3365.601209]  ? mark_held_locks+0x100/0x100
[ 3365.601241]  _do_fork+0x257/0xfe0
[ 3365.601260]  ? fork_idle+0x1d0/0x1d0
[ 3365.614460]  ? blkcg_print_stat+0xb90/0xb90
[ 3365.614479]  ? kasan_check_read+0x11/0x20
[ 3365.614497]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3365.614515]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3365.626418]  ? do_syscall_64+0x26/0x610
[ 3365.626435]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3365.626452]  ? do_syscall_64+0x26/0x610
[ 3365.638654]  __x64_sys_clone+0xbf/0x150
[ 3365.638677]  do_syscall_64+0x103/0x610
[ 3365.638698]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3365.638714] RIP: 0033:0x45b5f9
[ 3365.648218] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 3365.648227] RSP: 002b:00007fff4a8c69e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 3365.648243] RAX: ffffffffffffffda RBX: 00007f9926b11700 RCX: 000000000045b5f9
[ 3365.648251] RDX: 00007f9926b119d0 RSI: 00007f9926b10db0 RDI: 00000000003d0f00
[ 3365.648266] RBP: 00007fff4a8c6bf0 R08: 00007f9926b11700 R09: 00007f9926b11700
[ 3365.657583] R10: 00007f9926b119d0 R11: 0000000000000202 R12: 0000000000000000
[ 3365.657592] R13: 00007fff4a8c6a9f R14: 00007f9926b119c0 R15: 000000000073bfac
[ 3365.693104] Task in 
08:46:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6d00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil)

08:46:47 executing program 2:
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000340)=0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file1\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x80, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000240)={0x7, "89f3cfb919bc460737b5000fa176ca65d4329cd9c37661d40b1aa6ef99125f59", 0x120, 0x387e, 0x3290, 0x4, 0x3})

08:46:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3365.797159] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3365.817031] /syz3 killed as a result of limit of /syz3
[ 3365.871297] memory: usage 307180kB, limit 307200kB, failcnt 3845
08:46:48 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xff7f0000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3365.924227] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3365.963839] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3365.982481] Memory cgroup stats for /syz3: cache:56KB rss:165868KB rss_huge:153600KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:165848KB inactive_file:0KB active_file:0KB unevictable:0KB
08:46:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3366.052614] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3366.085185] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
08:46:48 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000007468315f746f5f7565616d00000004021900"], 0x1}}, 0x0)

[ 3366.111699] Memory cgroup out of memory: Kill process 13007 (syz-executor.3) score 1110 or sacrifice child
[ 3366.135980] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3366.161910] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3366.206140] Killed process 13007 (syz-executor.3) total-vm:72452kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 3366.217906] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3366.233151] EXT4-fs (loop4): get root inode failed
[ 3366.245780] EXT4-fs (loop4): mount failed
08:46:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1a1c)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x1, 0x4)

[ 3366.404404] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3366.553434] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:49 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6d01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7f)

08:46:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:49 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10000, 0x100)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffe}, 0x0, 0xffffffffbfffffff, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:49 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6d01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3367.091353] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3367.125786] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3367.148410] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3367.191348] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3367.224595] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3367.248327] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3367.286114] EXT4-fs (loop4): get root inode failed
08:46:49 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1, 0x0, 0x1d}}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x214, 0x300)

[ 3367.305611] EXT4-fs (loop4): mount failed
08:46:49 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x100000)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x400)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@remote, 0x3, r1})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x3, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101a00, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000001c0)={0x0, "ad5a8d96abc2aec05638ec880cbb93b1f2b59340008fee4622b414a6a260b600", 0x3, 0xffffffffffffffff})
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x2, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:49 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f40bfa30000000000006502000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001ffffffdc04000040000000b7050000230000006a0a00fe00e800008500000036000000b6000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

[ 3367.700915] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[ 3367.926332] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3367.992746] nla_parse: 3 callbacks suppressed
[ 3367.992760] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3368.021901] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3368.091519] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3368.279244] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3368.470310] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:50 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6e00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

08:46:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x4, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:50 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb)
sendmsg$rds(r1, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/48], 0x30}, 0x0)
perf_event_open$cgroup(&(0x7f0000000200)={0x6, 0x70, 0x7, 0x80000001, 0x100, 0x10000, 0x0, 0x2, 0x1000, 0x2, 0x1000, 0x6, 0x4, 0x10000, 0x8, 0x471a, 0x401, 0xae1, 0x5, 0x7a, 0xfff, 0x9, 0x100000000, 0xfffffffffffffffa, 0x2, 0x4, 0x1, 0x3, 0x8, 0x7fffffff, 0x1, 0x5, 0xfffffffffffffff7, 0x100000001, 0x40, 0x2, 0x3ff, 0x800, 0x0, 0x3000000000, 0x3, @perf_bp={&(0x7f00000001c0), 0x9}, 0x8204, 0x8, 0xfffffffffffffff7, 0x8, 0x7fffffff, 0x3, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x6)

08:46:50 executing program 2:
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={<r0=>0x0}, &(0x7f00000001c0)=0xc)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x8, 0x7fffffff, 0x4, 0x0, 0x2, 0x80000, 0x1, 0x4, 0x0, 0xfffffffff5852fe6, 0x40, 0x8, 0x8, 0x10000, 0x7fff, 0xfffffffffffffffb, 0x9, 0x7, 0x7f, 0x10000, 0x1, 0x80000000, 0x0, 0x4, 0x8, 0x10000, 0x6, 0x2, 0x9da, 0x7, 0x100, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x5, @perf_config_ext={0x3f, 0x1}, 0x28c4, 0xffff, 0x9, 0xe, 0x7fff, 0x1, 0x40}, r0, 0x7, r1, 0x8)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x438, 0x238, 0x0, 0x0, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @loopback, 0xff000000, 0xff000000, @mac, {[0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, 0x69, 0xee51, 0x8, 0x8000, 0x7, 0x9, 'teql0\x00', 'ifb0\x00', {}, {0xff}, 0x0, 0x10}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0xfe3, 0x4}}}, {{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0xff, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff]}, 0x9, 0xff, 0x9, 0x800, 0x7, 0x6, 'irlan0\x00', 'bpq0\x00', {0xff}, {0xff}, 0x0, 0x2c0}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7f}}}, {{@arp={@empty, @empty, 0xff000000, 0xffffffff, @mac=@dev={[], 0xd}, {[0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}, 0x7, 0x1, 0x7, 0x10000, 0xffffffffffffffff, 0xffff, 'rose0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x91}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x6}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x488)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

08:46:50 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6e00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3368.728822] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:50 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001880)=0xfffffffffffffffe, 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3368.867846] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3368.880252] EXT4-fs (loop4): Invalid log block size: 101711873
08:46:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

08:46:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x5000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r1 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [], {}, [{}, {}, {}], {}, {0x20, 0x2}}, 0x3c, 0x0)

08:46:51 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x5, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3368.996519] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

08:46:51 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="1e7cc3d5dfda6f2a0906c1b2c019712b547addd75b153e8b6b899f3971d6fdd0ad99b61f507cd02aca33cbf31c38ce4e68bef2f0e22ec21c2b4b8b"])
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3369.277815] EXT4-fs (loop4): Invalid log block size: 101711873
[ 3369.531095] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3369.619724] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3369.784174] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:52 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6e01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:52 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x6, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:52 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

08:46:52 executing program 0:
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_execute_func(&(0x7f0000000000)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3038082e67660e50e94d00c9c9c4625dbae5feabc4aba39ddf4507e50c420fae9972b571112d02")

08:46:52 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x95e1, 0x8800)
r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/relabel\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000180)=""/4096)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xabc, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xd, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x380, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3370.014457] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3370.138716] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3370.288396] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3370.337276] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3370.457465] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:52 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6e01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:52 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

08:46:52 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:52 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r0=>0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f00000000c0)='ext4\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000040)={0x10000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$overlay(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='overlay\x00', 0x80000, &(0x7f00000002c0)=ANY=[@ANYBLOB='index=off,smackfsdef=vboxnet0$,probz_role=&posix_acl_access,fowner>\x00'/81, @ANYRESDEC=r1, @ANYBLOB=',permit_directio,obj_user=cpuset^self\\,hash,\x00'])
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:52 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

08:46:52 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x97}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80000000000, 0x0, 0x0, 0x3, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={<r1=>0x0, @in6={{0xa, 0x4e24, 0xffffffff80000001, @mcast1, 0x5}}, 0x8, 0x153d, 0x9, 0x10000, 0x2f}, &(0x7f00000002c0)=0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r1, 0x9}, &(0x7f0000000340)=0x8)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r0)

08:46:53 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

08:46:53 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6f00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:53 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

08:46:53 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xf5c5, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:53 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x5, 0x4)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:46:53 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6f00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3371.870252] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:54 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

08:46:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={<r1=>0x0, 0x2c, "5e51775c4ec6a6a3bab30c478452ee02ca99ca81b74a2a8dba4858b2ae6deb9c5b3aa4464f6dd2608d10b519"}, &(0x7f0000000180)=0x34)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x2, 0x340d}, 0xc)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:54 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x10)

08:46:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:54 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1c5f, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, @perf_bp={0x0}, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x48542, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000680), 0x4)
lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xfff, 0x3, &(0x7f0000000400)=[{&(0x7f0000000180)="c0b2430ff07157e245e330b29c319981731f97508c41bc4e7b27177c90c53330a22abc48c9d81823140570667b8df8a74b618eb6ae23e84ae066f7d60cc0764d3260fd3d828cccd6708012af376dfbc3399ab3c909a24b65f86ebe4e171679bb1013867049f3d685690ed9e9e5adf9ff160845eaf2ce7974e10d51b4e8661fc5c3680f75b80adc1e86f54e05f4b54371d507855fff1041e50d61fc398afbdb9755854da674eda9247a93f83493a340a2f292ce59b494ab2c35db3c7d95d0e51c1cd4fdeb28f383960aa3f47f8afeba580c5ac5764b209dbf338ab93917", 0xdd, 0x100000001}, {&(0x7f0000000280)="40da6bf86b03e99aab3cf6735bf062ab76dfe830e7994342b701a5f4552a7937215e964d8128e78164fc2a42fb32c9e467063e4c3d7a8c4c8ad2cccf3db366492236db7aeed346a085c4a0dd9f3ce428d21c16b5c1f1e80bcfd157cc46ab952c224a06d6a074757950d93551ef15e06e368e52205c522e87f6ba620246ce5d203b844f4150210258359d7d3af9a85ec939ca7b81e0523d01e7c955141fe14addf5ae6b2f5f6d3d03ecce72b5c08f4cb87b6b918e2ed256ab3891e09e6acdc3f8070b15842accd30ecd14192fd95b86f23a6d0633ba5dd61ee18b2cf31624ee507dee32f10a24e85d957949113aa44a3d", 0xf0, 0x2}, {&(0x7f0000000380)="996b88250a5592d5868884c2ed6a5a7ae1370cec3634b6e3b32a58f514a47b99415443cd4a0f7171641941b1bfd3d1c5a2932e5df4bafcce34eb2da51ba06f2ab11a2e7de28d25bf832dbfb9ecba2817e8872e191b3d10", 0x57, 0xda02}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="6f726c6f762c626572726965722c626c6f636b5f76616c69646974792ca33e6640526e712c946873700f6e6f6d6263616368652c6e6f75696433322c6d61785f6469725f06697a655feba3c4061c914e1d623d3078303030303030303030303030303030382c71756f746169643c000000", @ANYRESDEC=r0, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',defcontext=system_u,dont_measure,smackfstransmute=ext4\x00,rootcontext=root,permit_directio,hash,appraise_type=imasig,\x00'])
accept4$packet(r1, 0x0, &(0x7f0000000540), 0x80000)
socket$rds(0x15, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3373.004443] nla_parse: 5 callbacks suppressed
[ 3373.004452] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3373.245173] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:55 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6f01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:55 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/213, &(0x7f0000000040)=0xd5)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:55 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3e4e, 0x0, 0x0, 0x3, 0x6})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200))
r2 = syz_open_pts(r1, 0x0)
readv(r2, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}], 0x1)

08:46:55 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6f01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3373.568282] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3373.609844] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:46:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3373.699703] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x14, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(r0, 0xf03, 0x6, 0x4)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:56 executing program 0:
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x3000000, 0x0, 0x0)

08:46:56 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

08:46:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000300))

[ 3374.242178] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3374.582868] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3374.603862] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3374.662167] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3374.906695] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:57 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:57 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

08:46:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1a, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:57 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x408140, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x800001, 0x70, 0x0, 0x3, 0x0, 0x1, 0x0, 0x50d, 0x0, 0x0, 0x420f4f21, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffe, 0x0, 0x0, 0x400000, 0x1, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffff800)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, <r2=>0x0}, &(0x7f0000000240)=0xc)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
chown(&(0x7f00000001c0)='./file0\x00', r2, r3)
fcntl$setlease(r1, 0x400, 0x2)
acct(&(0x7f0000000140)='./file0\x00')
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)

08:46:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e)
openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockname$unix(r0, &(0x7f0000000680), &(0x7f0000000640)=0x3f)
pipe2$9p(&(0x7f0000000100), 0x800)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16]], 0x8)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0)
getrusage(0x0, 0x0)
unshare(0x40000000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

08:46:57 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3375.231073] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3375.254911] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:57 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

08:46:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x65, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4000, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000140)=0x8)

[ 3375.474604] IPVS: ftp: loaded support on port[0] = 21
08:46:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:46:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x389, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3375.728298] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:46:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3376.125929] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3376.195291] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:46:59 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7001, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:46:59 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x8000)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:46:59 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x42a, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:46:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3377.577627] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3378.625624] nla_parse: 4 callbacks suppressed
[ 3378.625636] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:09 executing program 0:
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x5, @rand_addr="41f8dbfd9b2874887ef7d8af1e90a524"}}}, 0x108)

08:47:09 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7001, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:09 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$9p_xen(&(0x7f00000000c0)='$\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=xen,debug=0x00000000000000f6,uname=@ppp0,posixacl,posixacl,smackfst\t\x00\x00\x00\x00\x00\x00\x00=vmnet0selinuxkeyring,}posix_acl_access(/{$ppp0,subj_role=ext4\x00,defcontext=root,euid>', @ANYRESDEC=r0, @ANYBLOB=',permit_directio,context=user_u,\x00'])
syz_mount_image$ext4(&(0x7f0000000100)='ex|4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:47:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x46e, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:09 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3387.012885] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:09 executing program 2:
syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00')
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffff9c, 0x891c, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e20, @multicast2}})
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "6091c0e29fabfbc4f84a9097c863408787d1cdd8"}, 0x15, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:47:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x46f, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3387.377965] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0x0, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x470, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3387.885696] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3388.049537] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3388.335741] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:10 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0x0, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x471, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:10 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:10 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1fffe000000)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x6)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e21, @remote}})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

[ 3388.723800] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3388.782412] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0x0, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3388.928818] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:11 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'bridge_slave_0\x00', 0x40})

08:47:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x472, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3389.252599] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3389.710511] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3389.858836] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3390.070121] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:12 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x473, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:47:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:12 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:12 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3390.405084] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:12 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3390.529420] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:12 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
getpeername$netrom(r1, &(0x7f0000000280)={{0x3, @bcast}, [@default, @remote, @default, @remote, @remote, @default, @null, @default]}, &(0x7f0000000300)=0x48)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x5, @remote, 0x1}, @in6={0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, [], 0x19}, 0x2}], 0x58)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000340)={0x80, 0x200, 0x1})
r2 = semget(0x3, 0x0, 0x60)
semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000240)=""/64)
open_by_handle_at(r0, &(0x7f0000000380)={0x35, 0x10000, "2d9bec5a3a9c062a55615aaa07879e914e0a18f15ff9dfed2633af0c143b436839062bcb05a16e2cbeb87b46f4"}, 0x80141)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0x7ff, 0x1)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20000000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:47:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:13 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x474, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3390.973317] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 3391.075111] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:14 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:14 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:14 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x7, 0xfffffffffffffff7, 0x1, 0x73fc78e, 0x4, 0x9})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x10)

08:47:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x475, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:14 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3392.054509] nla_parse: 4 callbacks suppressed
[ 3392.054574] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:14 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3392.198466] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x476, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3392.333494] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:14 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:14 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3392.993685] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3393.198866] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3393.434512] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:15 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:15 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)

08:47:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x477, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:15 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:15 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3393.803387] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3393.857279] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3393.984545] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:16 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x401, 0x200, 0x7fff800000, 0x3ff, 0x3, 0x1, 0x0, <r1=>0x0}, &(0x7f0000000200)=0x20)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e20, @multicast2}}}, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r1, 0x2, 0x0, 0x8, 0x100}, &(0x7f0000000280)=0x18)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:47:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x478, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3394.757199] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3395.004591] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3395.270990] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:17 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:17 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x1000020040)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x310, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x192f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x88}}, 0x40000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)

08:47:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x479, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x2603, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3395.737416] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
08:47:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x2608, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:19 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x6000, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8923, &(0x7f00000001c0)={'team_slave_0\x00'})

[ 3397.373223] nla_parse: 5 callbacks suppressed
[ 3397.373270] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:19 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:47:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:19 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000110001010000000000000000e0000004000000000000000000000000000000000a00000014000d0000000000feffffff0000000000000000"], 0x1}, 0x8}, 0x0)

08:47:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x7800, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:19 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = open$dir(0x0, 0x0, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0x0)

08:47:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3398.055961] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3398.138744] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3398.475970] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:20 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x7900, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

08:47:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket(0x15, 0x8000000080005, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xfffffffffffffffe}, 0x1c)
getpeername$packet(r1, 0x0, 0x0)

08:47:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:20 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3398.796647] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket(0x15, 0x8000000080005, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xfffffffffffffffe}, 0x1c)
getpeername$packet(r1, 0x0, 0x0)

[ 3398.859949] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

08:47:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x7a00, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd98, 0xffffffffffffffff, 0x0, 0xfffffe35)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x35, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

08:47:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xc000, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3399.792666] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3399.950166] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3400.151115] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:22 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, 0x0, 0x3f})

08:47:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xe800, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3e4e, 0x0, 0x0, 0x0, 0x6})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}], 0x1)

08:47:22 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3400.383775] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:22 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:47:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:22 executing program 2:
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x200030)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x400003, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x19b)
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)

08:47:22 executing program 2:
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x200030)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x400003, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x19b)
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)

08:47:23 executing program 2:
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x200030)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x400003, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x19b)
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)

08:47:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x75ce2dd9, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:24 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:24 executing program 2:
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x200030)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x400003, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x19b)
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)

08:47:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:24 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:47:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x75ce2ddf, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:24 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7501, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140))

08:47:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xffffff1f, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000008001b00000000006d3422f59e42df1a0c390b54331ef396b5d47416c5ce8b334d"], 0x1}}, 0x0)

08:47:25 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
recvmmsg(r1, &(0x7f0000006a80)=[{{0x0, 0xfffffffffffffe7a, 0x0}}], 0x4c, 0x0, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000080)={0x1c4, 0x12}, 0x18)

08:47:25 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1, 0x0, 0x1d}}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x214, 0x7ffffffff000)

[ 3403.317686] nla_parse: 5 callbacks suppressed
[ 3403.317696] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3403.404274] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3403.604564] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:26 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7501, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xffffffc0, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:26 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000240))

08:47:26 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/102, 0x3f})

[ 3403.941558] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:26 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

08:47:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)

[ 3403.991479] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3404.289382] FAT-fs (loop2): bogus number of reserved sectors
[ 3404.305814] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3404.376567] FAT-fs (loop2): bogus number of reserved sectors
[ 3404.382992] FAT-fs (loop2): Can't find a valid FAT filesystem
08:47:26 executing program 2:
r0 = msgget$private(0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)

08:47:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x118)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000000)="410f01f9640ff88e0900000064ff0941c3c48210f77e0b3e46d8731266420fe2e33e0f111083d4b842419dc4417c7715346b")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4, 0x0, 0x2}, 0x20)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

08:47:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3405.042088] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3405.553013] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3405.811828] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:28 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x8, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:28 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x34}]})

08:47:28 executing program 2:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = pkey_alloc(0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pkey_mprotect(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x0, r1)

08:47:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="100000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:28 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7601, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:28 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x1, 0x2100, 0x0)

08:47:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100))

[ 3406.168305] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3406.200037] EXT4-fs (loop4): inodes count not valid: 16 vs 128
[ 3406.237675] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100))
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200))
r2 = syz_open_pts(r1, 0x0)
readv(r2, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}], 0x1)

08:47:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3406.678735] EXT4-fs (loop4): inodes count not valid: 96 vs 128
08:47:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="790000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3406.984194] EXT4-fs (loop4): inodes count not valid: 121 vs 128
08:47:29 executing program 2:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = pkey_alloc(0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pkey_mprotect(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x0, r1)

08:47:30 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7601, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="7a0000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100))

08:47:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
poll(&(0x7f0000000140)=[{r2}, {r1}, {r2}], 0x3, 0x0)

08:47:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10)
connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
dup2(r1, r3)
tkill(r2, 0x1000000000016)

08:47:30 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:30 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100))

08:47:30 executing program 5:

[ 3408.220188] EXT4-fs (loop4): inodes count not valid: 122 vs 128
08:47:30 executing program 2:

08:47:30 executing program 5:

08:47:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="7b0000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:30 executing program 2:

[ 3408.588677] EXT4-fs (loop4): inodes count not valid: 123 vs 128
[ 3408.967612] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 3408.995767] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3409.001382] CPU: 0 PID: 19047 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3409.008328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3409.017695] Call Trace:
[ 3409.020304]  dump_stack+0x172/0x1f0
[ 3409.023959]  dump_header+0x15e/0x929
[ 3409.027778]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3409.032902]  ? ___ratelimit+0x60/0x595
[ 3409.036809]  ? do_raw_spin_unlock+0x57/0x270
[ 3409.041250]  oom_kill_process.cold+0x10/0x6f5
[ 3409.045762]  ? task_will_free_mem+0x139/0x6e0
[ 3409.050273]  ? find_held_lock+0x35/0x130
[ 3409.054352]  out_of_memory+0x936/0x12d0
[ 3409.058350]  ? lock_downgrade+0x810/0x810
[ 3409.062523]  ? oom_killer_disable+0x280/0x280
[ 3409.067033]  ? find_held_lock+0x35/0x130
[ 3409.071135]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3409.075997]  ? memcg_event_wake+0x230/0x230
[ 3409.080338]  ? do_raw_spin_unlock+0x57/0x270
[ 3409.084760]  ? _raw_spin_unlock+0x2d/0x50
[ 3409.088931]  try_charge+0x1028/0x15b0
[ 3409.093107]  ? find_held_lock+0x35/0x130
[ 3409.097199]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3409.102066]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3409.102085]  ? find_held_lock+0x35/0x130
[ 3409.102107]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3409.102134]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3409.120805]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3409.125363]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3409.125385]  memcg_kmem_charge+0x136/0x300
[ 3409.125403]  __alloc_pages_nodemask+0x3c6/0x760
[ 3409.125419]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3409.125439]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3409.125456]  ? trace_hardirqs_on+0x67/0x230
[ 3409.125468]  ? kasan_check_read+0x11/0x20
[ 3409.125488]  copy_process.part.0+0x3e0/0x7970
[ 3409.125505]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3409.125520]  ? delayacct_end+0x5c/0x100
[ 3409.125540]  ? __delayacct_freepages_end+0xe0/0x140
[ 3409.144324]  ? __lock_acquire+0x6eb/0x48f0
[ 3409.144350]  ? __cleanup_sighand+0x70/0x70
[ 3409.144366]  ? mark_held_locks+0x100/0x100
[ 3409.144399]  _do_fork+0x257/0xfe0
[ 3409.192198]  ? fork_idle+0x1d0/0x1d0
[ 3409.195956]  ? blkcg_print_stat+0xb90/0xb90
[ 3409.200473]  ? kasan_check_read+0x11/0x20
[ 3409.204643]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3409.209421]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3409.214192]  ? do_syscall_64+0x26/0x610
[ 3409.218179]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3409.223561]  ? do_syscall_64+0x26/0x610
[ 3409.227563]  __x64_sys_clone+0xbf/0x150
[ 3409.231562]  do_syscall_64+0x103/0x610
[ 3409.235473]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3409.240675] RIP: 0033:0x45b5f9
[ 3409.243878] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 3409.262798] RSP: 002b:00007fff4a8c69e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 3409.262817] RAX: ffffffffffffffda RBX: 00007f9926af0700 RCX: 000000000045b5f9
[ 3409.262823] RDX: 00007f9926af09d0 RSI: 00007f9926aefdb0 RDI: 00000000003d0f00
[ 3409.262830] RBP: 00007fff4a8c6bf0 R08: 00007f9926af0700 R09: 00007f9926af0700
[ 3409.262838] R10: 00007f9926af09d0 R11: 0000000000000202 R12: 0000000000000000
[ 3409.262846] R13: 00007fff4a8c6a9f R14: 00007f9926af09c0 R15: 000000000073c04c
[ 3409.307942] Task in /syz3 killed as a result of limit of /syz3
[ 3409.314278] memory: usage 307180kB, limit 307200kB, failcnt 3890
[ 3409.321255] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3409.328676] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3409.335003] Memory cgroup stats for /syz3: cache:56KB rss:163748KB rss_huge:151552KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:163708KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3409.359869] Memory cgroup out of memory: Kill process 13034 (syz-executor.3) score 1110 or sacrifice child
[ 3409.370523] Killed process 13034 (syz-executor.3) total-vm:72452kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 3409.449576] nla_parse: 5 callbacks suppressed
[ 3409.449597] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3409.701994] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3409.945042] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:32 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:32 executing program 5:

08:47:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="004000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:32 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7701, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:32 executing program 5:

08:47:32 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3410.254070] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3410.293392] EXT4-fs (loop4): inodes count not valid: 16384 vs 128
08:47:32 executing program 5:

08:47:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:32 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3410.595502] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3410.647764] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3410.671824] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3410.722049] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3410.772425] EXT4-fs (loop4): get root inode failed
[ 3410.799042] EXT4-fs (loop4): mount failed
[ 3411.074194] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3411.120036] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3411.283907] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3411.523351] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:33 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7701, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:33 executing program 5:

08:47:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000a04000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:33 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7800, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3411.871574] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3411.883993] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3411.899359] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:47:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:34 executing program 5:

[ 3411.922761] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3411.956370] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3411.991041] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3412.036072] EXT4-fs (loop4): get root inode failed
08:47:34 executing program 5:

[ 3412.063659] EXT4-fs (loop4): mount failed
08:47:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800200003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:34 executing program 5:

[ 3412.283476] EXT4-fs (loop4): inodes count not valid: 640 vs 128
08:47:35 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x48)
mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)

08:47:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)

08:47:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800300003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:35 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7800, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

08:47:35 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7801, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x48, 0x12, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)

08:47:35 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, &(0x7f0000000100))

[ 3413.604115] EXT4-fs (loop4): inodes count not valid: 896 vs 128
08:47:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3413.818324] EXT4-fs (loop4): inodes count not valid: 1152 vs 128
08:47:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800500003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3414.053506] EXT4-fs (loop4): inodes count not valid: 1408 vs 128
08:47:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800600003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)

[ 3414.309972] EXT4-fs (loop4): inodes count not valid: 1664 vs 128
08:47:36 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x7, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0)

08:47:36 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0xd)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr="21e98b64a2fb62bc197ddc651ad15493"}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0x2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x4, 0x0, 0x6}}, 0xe8)
r1 = dup(r0)
write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0)

08:47:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800700003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3414.512396] nla_parse: 5 callbacks suppressed
[ 3414.512408] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3414.646853] EXT4-fs (loop4): inodes count not valid: 1920 vs 128
[ 3414.804339] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3415.049436] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:37 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7801, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x7, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0)

08:47:37 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpeername$inet(r0, 0x0, 0x0)

08:47:37 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800800003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:37 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:37 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)

08:47:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x7, 0x0, [@loopback]}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0)

[ 3415.384547] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3415.443756] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3415.577195] EXT4-fs (loop4): inodes count not valid: 2176 vs 128
08:47:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000159, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getgid()
getpgid(0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001400)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
getresgid(&(0x7f0000000380), 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getuid()
getresgid(0x0, &(0x7f00000015c0), 0x0)
getgid()
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0)
getresuid(0x0, &(0x7f00000016c0), &(0x7f0000001700))
stat(&(0x7f0000001740)='./file0\x00', 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)

08:47:37 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd)
mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)

08:47:37 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800900003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = epoll_create1(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x4e52, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000))
shutdown(r2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x80000005})

[ 3415.903458] EXT4-fs (loop4): inodes count not valid: 2432 vs 128
08:47:38 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800a00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3416.201572] EXT4-fs (loop4): inodes count not valid: 2688 vs 128
[ 3416.422897] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3416.654983] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3416.881457] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:39 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800c00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:39 executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r0, 0x0)
mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x1000006, 0x2013, r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

08:47:39 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7901, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3417.209099] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3417.249803] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3417.266691] audit: type=1400 audit(1555318059.410:686): avc:  denied  { map } for  pid=19732 comm="syz-executor.5" path="/root/syzkaller-testdir690676137/syzkaller.t9u5NO/256/cpu.stat" dev="sda1" ino=18080 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 3417.304563] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 3417.333235] EXT4-fs (loop0): group descriptors corrupted!
08:47:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3417.408147] EXT4-fs (loop4): inodes count not valid: 3200 vs 128
[ 3417.432460] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3417.459493] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[ 3417.491388] EXT4-fs (loop0): group descriptors corrupted!
08:47:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="802200003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:39 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00W\xcb\xd53\xc0g\x8a\x1c\xc8m\x8f\xd3\x90\x1f+\x81\x9b\x90\b&\xa5\xd60\xb9\x9e\xcc\xaf3\xea:\aL\x03l\\\xdd\x84\xeeL\xeb,\xa5\xc1\xd4\xd4\xa9I\x87\x06\xfbH>SL\xddsRA\xf2\xf5!JnO\xa7l$\x00V\xa4^\xc7.z)\xc3\f\xee\xce\xec\vM\xcb\xb7\xaa\"[\x19\f\x87\xe4kEmO#\xab`/\xba\xf1\xe3^@:\x86\xff\xc4c\x81\xf0t\x9f7x\xb6\xa3\xedj\\\xbd\x8aK*2|\xdf\xc2[\xbf\x87J\a\xed\b\x8c;\x00\xdf\xab\xcb2\xde\x1f\x90\x1cY\x17+\xb1\x808\xc0\n\x96\x9cVp\x8dq\xba}]\x97\xac\xc9\x91\t\xb4\x97\x11?\xfe\xdf\x00'/190)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00\x01y.swaS.cur\x00\x01\x00\x00\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc0\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80\x00\x00\x00\x00\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000fd5000/0x4000)=nil)

[ 3417.752213] EXT4-fs (loop4): inodes count not valid: 8832 vs 128
08:47:40 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="802300003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3418.030513] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3418.128928] EXT4-fs (loop4): inodes count not valid: 9088 vs 128
08:47:40 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="802c00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85e20bdc9e1587a95d3edd362ede65b1e9dcbc2050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6190fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f477253900"/192, 0xc0, r1)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r3}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f00000000c0)={&(0x7f0000000580)={'streebog256-generic\x00\x04\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}})

[ 3418.373842] EXT4-fs (loop4): inodes count not valid: 11392 vs 128
[ 3418.467836] could not allocate digest TFM handle streebog256-generic
08:47:41 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7901, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:41 executing program 5:
syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)

08:47:41 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="802d00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

08:47:41 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3418.957338] EXT4-fs (loop4): inodes count not valid: 11648 vs 128
08:47:41 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd)
mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='cgroup:system)\x00')

08:47:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="804800003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x800)

08:47:41 executing program 5:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3})
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 3419.211012] EXT4-fs (loop4): inodes count not valid: 18560 vs 128
08:47:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="804c00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:41 executing program 0:
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4})
r1 = syz_open_pts(r0, 0x800)
readv(r1, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}], 0x1)

[ 3419.539858] EXT4-fs (loop4): inodes count not valid: 19584 vs 128
[ 3419.942553] nla_parse: 4 callbacks suppressed
[ 3419.942565] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3420.042528] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3420.234332] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3420.482568] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:42 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
ioctl$TCSETAF(r1, 0x541b, &(0x7f0000000000))

08:47:42 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="806000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:42 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x23)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000000)={0xffffffffffff02a9, 0x9, 0x2})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001, 0x0, 0x0, 0x1000000000054}, 0x98)

08:47:42 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3420.831267] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3420.870633] EXT4-fs (loop4): inodes count not valid: 24704 vs 128
[ 3420.899161] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
gettid()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg(r0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000030000000fbffffff6e3096d2a59598e4735d858710b950b57abf7a9428e08300005811d409222a61f45bed4bdafeeec8a97453af1ff7ed306602e8edc5273bae45f0ad25c4dd482bd8935e995ffa497e1dd581aded13616e002e8ee22364bd"], 0x0, 0x6f, 0x0, 0x1}, 0x20)
sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0)
r5 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='\x00', r2}, 0x10)
socketpair(0x5, 0x3, 0x0, 0x0)
write$cgroup_int(r5, 0x0, 0x0)

08:47:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="806800003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:43 executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

[ 3421.227974] EXT4-fs (loop4): inodes count not valid: 26752 vs 128
08:47:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="806c00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3421.354294] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000
[ 3421.466327] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 3421.472426] CPU: 0 PID: 20354 Comm: syz-executor.5 Not tainted 4.19.34 #2
[ 3421.479378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3421.488751] Call Trace:
[ 3421.491363]  dump_stack+0x172/0x1f0
[ 3421.495009]  dump_header+0x15e/0x929
[ 3421.498745]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3421.503868]  ? ___ratelimit+0x60/0x595
[ 3421.507773]  ? do_raw_spin_unlock+0x57/0x270
[ 3421.512221]  oom_kill_process.cold+0x10/0x6f5
[ 3421.516756]  ? task_will_free_mem+0x139/0x6e0
[ 3421.521284]  out_of_memory+0x936/0x12d0
[ 3421.525285]  ? oom_killer_disable+0x280/0x280
[ 3421.529806]  ? cgroup_file_notify+0x140/0x1b0
[ 3421.534334]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3421.539223]  ? memcg_event_wake+0x230/0x230
[ 3421.543586]  ? _raw_spin_unlock_irqrestore+0xbd/0xe0
[ 3421.548741]  ? cgroup_file_notify+0x140/0x1b0
[ 3421.553270]  memory_max_write+0x169/0x300
[ 3421.557449]  ? mem_cgroup_write+0x360/0x360
[ 3421.561800]  ? lock_acquire+0x16f/0x3f0
08:47:43 executing program 0:
creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigsuspend(&(0x7f0000000040)={0x9}, 0x8)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 3421.565801]  ? kernfs_fop_write+0x227/0x480
[ 3421.570170]  cgroup_file_write+0x245/0x7a0
[ 3421.574432]  ? mem_cgroup_write+0x360/0x360
[ 3421.578777]  ? cgroup_migrate_add_task+0x8a0/0x8a0
[ 3421.584443]  ? cgroup_migrate_add_task+0x8a0/0x8a0
[ 3421.589397]  kernfs_fop_write+0x2ba/0x480
[ 3421.593586]  __vfs_write+0x116/0x820
[ 3421.597318]  ? kernfs_fop_open+0xd90/0xd90
[ 3421.601604]  ? kernel_read+0x120/0x120
[ 3421.605512]  ? __lock_is_held+0xb6/0x140
[ 3421.609600]  ? rcu_read_lock_sched_held+0x110/0x130
[ 3421.614640]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 3421.619418]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3421.624979]  ? __sb_start_write+0x1ac/0x360
[ 3421.629324]  vfs_write+0x20c/0x560
[ 3421.632882]  ksys_write+0xea/0x1f0
[ 3421.636623]  ? __ia32_sys_read+0xb0/0xb0
[ 3421.640710]  ? do_syscall_64+0x26/0x610
[ 3421.644916]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3421.650307]  ? do_syscall_64+0x26/0x610
[ 3421.654310]  __x64_sys_write+0x73/0xb0
[ 3421.658212]  do_syscall_64+0x103/0x610
[ 3421.662145]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3421.667452] RIP: 0033:0x458c29
[ 3421.670657] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3421.689585] RSP: 002b:00007fd0b3aa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3421.689603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[ 3421.689610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
08:47:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3421.689617] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 3421.689625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd0b3aa36d4
[ 3421.689633] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff
[ 3421.749336] Task in /syz5 killed as a result of limit of /syz5
[ 3421.756630] memory: usage 21024kB, limit 0kB, failcnt 414
[ 3421.762678] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3421.765582] EXT4-fs (loop4): inodes count not valid: 27776 vs 128
[ 3421.770469] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3421.792592] Memory cgroup stats for /syz5: cache:8KB rss:6352KB rss_huge:6144KB shmem:40KB mapped_file:132KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:6420KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3421.816893] Memory cgroup out of memory: Kill process 20350 (syz-executor.5) score 9787000 or sacrifice child
[ 3421.828810] Killed process 20350 (syz-executor.5) total-vm:72584kB, anon-rss:4200kB, file-rss:34816kB, shmem-rss:0kB
[ 3421.856306] oom_reaper: reaped process 20350 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB
[ 3422.011043] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3422.117860] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3422.291215] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3422.489642] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:44 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
gettid()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg(r0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000030000000fbffffff6e3096d2a59598e4735d858710b950b57abf7a9428e08300005811d409222a61f45bed4bdafeeec8a97453af1ff7ed306602e8edc5273bae45f0ad25c4dd482bd8935e995ffa497e1dd581aded13616e002e8ee22364bd"], 0x0, 0x6f, 0x0, 0x1}, 0x20)
sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0)
r5 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='\x00', r2}, 0x10)
socketpair(0x5, 0x3, 0x0, 0x0)
write$cgroup_int(r5, 0x0, 0x0)

08:47:44 executing program 0:
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)

08:47:44 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7b00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:44 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="807400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3422.714567] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0
[ 3422.766592] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 3422.792800] CPU: 0 PID: 5697 Comm: syz-executor.5 Not tainted 4.19.34 #2
[ 3422.799740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3422.809116] Call Trace:
[ 3422.811724]  dump_stack+0x172/0x1f0
[ 3422.815369]  dump_header+0x15e/0x929
[ 3422.819115]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3422.824242]  ? ___ratelimit+0x60/0x595
[ 3422.828151]  ? do_raw_spin_unlock+0x57/0x270
[ 3422.832612]  oom_kill_process.cold+0x10/0x6f5
[ 3422.837140]  ? task_will_free_mem+0x139/0x6e0
[ 3422.841658]  ? find_held_lock+0x35/0x130
[ 3422.845746]  out_of_memory+0x936/0x12d0
[ 3422.849764]  ? lock_downgrade+0x810/0x810
[ 3422.853938]  ? oom_killer_disable+0x280/0x280
[ 3422.858456]  ? find_held_lock+0x35/0x130
[ 3422.862548]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3422.867414]  ? memcg_event_wake+0x230/0x230
[ 3422.871759]  ? do_raw_spin_unlock+0x57/0x270
[ 3422.876191]  ? _raw_spin_unlock+0x2d/0x50
[ 3422.880363]  try_charge+0x1028/0x15b0
[ 3422.884178]  ? find_held_lock+0x35/0x130
[ 3422.888264]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3422.893138]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3422.898000]  ? find_held_lock+0x35/0x130
[ 3422.902086]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3422.906965]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3422.911656]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3422.916195]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3422.921081]  memcg_kmem_charge+0x136/0x300
[ 3422.925346]  __alloc_pages_nodemask+0x3c6/0x760
[ 3422.930037]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3422.935113]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3422.940092]  ? trace_hardirqs_on+0x67/0x230
[ 3422.944439]  ? kasan_check_read+0x11/0x20
[ 3422.948616]  copy_process.part.0+0x3e0/0x7970
[ 3422.953143]  ? mark_held_locks+0x100/0x100
[ 3422.957417]  ? finish_mkwrite_fault+0x4f0/0x4f0
[ 3422.962118]  ? __might_fault+0x12b/0x1e0
[ 3422.966212]  ? __cleanup_sighand+0x70/0x70
[ 3422.970463]  ? lock_downgrade+0x810/0x810
[ 3422.974635]  _do_fork+0x257/0xfe0
[ 3422.978120]  ? fork_idle+0x1d0/0x1d0
[ 3422.981869]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3422.986669]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3422.991442]  ? do_syscall_64+0x26/0x610
[ 3422.995518]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3423.000898]  ? do_syscall_64+0x26/0x610
[ 3423.004894]  __x64_sys_clone+0xbf/0x150
[ 3423.004915]  do_syscall_64+0x103/0x610
08:47:45 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

08:47:45 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3423.012797]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3423.017994] RIP: 0033:0x4571fa
[ 3423.021195] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 3423.040120] RSP: 002b:00007ffff7adce90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 3423.040138] RAX: ffffffffffffffda RBX: 00007ffff7adce90 RCX: 00000000004571fa
[ 3423.040145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 3423.040152] RBP: 00007ffff7adced0 R08: 0000000000000001 R09: 000000000193b940
[ 3423.040159] R10: 000000000193bc10 R11: 0000000000000246 R12: 0000000000000001
[ 3423.040167] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff7adcf20
[ 3423.199221] EXT4-fs (loop4): inodes count not valid: 29824 vs 128
[ 3423.211434] Task in /syz5 killed as a result of limit of /syz5
[ 3423.217940] memory: usage 16572kB, limit 0kB, failcnt 422
[ 3423.223847] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3423.231110] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
08:47:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x7ffffffe, 0x4)
connect$inet(r1, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000000180)="232562ec0301b579e050498f140000e1", 0x10)

[ 3423.237890] Memory cgroup stats for /syz5: cache:8KB rss:2180KB rss_huge:2048KB shmem:40KB mapped_file:132KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3423.267602] Memory cgroup out of memory: Kill process 7019 (syz-executor.5) score 9529000 or sacrifice child
[ 3423.278397] Killed process 7019 (syz-executor.5) total-vm:72584kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB
08:47:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="807a00003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3423.358354] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0
[ 3423.396273] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 3423.411508] CPU: 0 PID: 5697 Comm: syz-executor.5 Not tainted 4.19.34 #2
[ 3423.419532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3423.428891] Call Trace:
[ 3423.431499]  dump_stack+0x172/0x1f0
[ 3423.435144]  dump_header+0x15e/0x929
[ 3423.438871]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3423.443986]  ? ___ratelimit+0x60/0x595
[ 3423.447883]  ? do_raw_spin_unlock+0x57/0x270
[ 3423.453883]  oom_kill_process.cold+0x10/0x6f5
[ 3423.458399]  ? task_will_free_mem+0x139/0x6e0
[ 3423.463087]  ? find_held_lock+0x35/0x130
[ 3423.467176]  out_of_memory+0x936/0x12d0
[ 3423.471167]  ? lock_downgrade+0x810/0x810
[ 3423.475328]  ? oom_killer_disable+0x280/0x280
[ 3423.479831]  ? find_held_lock+0x35/0x130
[ 3423.483915]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3423.488771]  ? memcg_event_wake+0x230/0x230
[ 3423.493122]  ? do_raw_spin_unlock+0x57/0x270
[ 3423.497546]  ? _raw_spin_unlock+0x2d/0x50
[ 3423.501708]  try_charge+0x1028/0x15b0
[ 3423.505602]  ? find_held_lock+0x35/0x130
[ 3423.509689]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3423.514542]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3423.519393]  ? find_held_lock+0x35/0x130
[ 3423.523469]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3423.528336]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3423.533019]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3423.537532]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3423.542394]  memcg_kmem_charge+0x136/0x300
[ 3423.546642]  __alloc_pages_nodemask+0x3c6/0x760
[ 3423.551319]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3423.556350]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3423.560946]  ? trace_hardirqs_on+0x67/0x230
[ 3423.565275]  ? kasan_check_read+0x11/0x20
[ 3423.569444]  copy_process.part.0+0x3e0/0x7970
[ 3423.574005]  ? mark_held_locks+0x100/0x100
[ 3423.578248]  ? finish_mkwrite_fault+0x4f0/0x4f0
[ 3423.583704]  ? __might_fault+0x12b/0x1e0
[ 3423.587787]  ? __cleanup_sighand+0x70/0x70
[ 3423.592036]  ? lock_downgrade+0x810/0x810
[ 3423.596221]  _do_fork+0x257/0xfe0
[ 3423.599686]  ? fork_idle+0x1d0/0x1d0
[ 3423.603416]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3423.608182]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3423.612942]  ? do_syscall_64+0x26/0x610
[ 3423.616929]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3423.622298]  ? do_syscall_64+0x26/0x610
[ 3423.626291]  __x64_sys_clone+0xbf/0x150
[ 3423.630277]  do_syscall_64+0x103/0x610
[ 3423.634186]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3423.639378] RIP: 0033:0x4571fa
[ 3423.642599] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 3423.661538] RSP: 002b:00007ffff7adce90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 3423.669264] RAX: ffffffffffffffda RBX: 00007ffff7adce90 RCX: 00000000004571fa
[ 3423.676542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 3423.683817] RBP: 00007ffff7adced0 R08: 0000000000000001 R09: 000000000193b940
[ 3423.691101] R10: 000000000193bc10 R11: 0000000000000246 R12: 0000000000000001
[ 3423.698379] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff7adcf20
[ 3423.785518] Task in /syz5 killed as a result of limit of /syz5
[ 3423.792827] memory: usage 14224kB, limit 0kB, failcnt 428
[ 3423.805420] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3423.818156] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3423.829803] Memory cgroup stats for /syz5: cache:8KB rss:12KB rss_huge:0KB shmem:40KB mapped_file:132KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:56KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3423.875486] Memory cgroup out of memory: Kill process 5697 (syz-executor.5) score 8984000 or sacrifice child
[ 3423.899551] EXT4-fs (loop4): inodes count not valid: 31360 vs 128
[ 3423.902732] Killed process 5697 (syz-executor.5) total-vm:72320kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB
08:47:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3423.945122] oom_reaper: reaped process 5697 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
08:47:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80c000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:47:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000023c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})

[ 3424.164913] EXT4-fs (loop4): inodes count not valid: 49280 vs 128
[ 3425.438101] nla_parse: 3 callbacks suppressed
[ 3425.438112] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3426.189153] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:47:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
gettid()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg(r0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000030000000fbffffff6e3096d2a59598e4735d858710b950b57abf7a9428e08300005811d409222a61f45bed4bdafeeec8a97453af1ff7ed306602e8edc5273bae45f0ad25c4dd482bd8935e995ffa497e1dd581aded13616e002e8ee22364bd"], 0x0, 0x6f, 0x0, 0x1}, 0x20)
sendmsg(r4, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0)
r5 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x0, 0x1, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='\x00', r2}, 0x10)
socketpair(0x5, 0x3, 0x0, 0x0)
write$cgroup_int(r5, 0x0, 0x0)

08:47:49 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7b00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:49 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:47:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:49 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7b01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:47:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80e500003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3427.094368] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3427.181684] EXT4-fs (loop4): inodes count not valid: 58752 vs 128
08:47:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="802e02003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3427.481730] EXT4-fs (loop4): inodes count not valid: 142976 vs 128
[ 3427.555546] protocol 88fb is buggy, dev hsr_slave_0
[ 3427.560813] protocol 88fb is buggy, dev hsr_slave_1
08:47:49 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800003003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3427.692663] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:47:49 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3427.805608] EXT4-fs (loop4): inodes count not valid: 196736 vs 128
08:47:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:47:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="801004003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3428.061201] EXT4-fs (loop4): inodes count not valid: 266368 vs 128
08:47:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="803704003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3428.308950] EXT4-fs (loop4): inodes count not valid: 276352 vs 128
[ 3428.460414] bridge0: port 3(gretap0) entered disabled state
[ 3428.471877] device gretap0 left promiscuous mode
[ 3428.477345] bridge0: port 3(gretap0) entered disabled state
[ 3428.549575] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3428.974284] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3429.457371] device bridge_slave_1 left promiscuous mode
[ 3429.463842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3429.517666] device bridge_slave_0 left promiscuous mode
[ 3429.527168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3435.659926] device hsr_slave_1 left promiscuous mode
[ 3435.717721] device hsr_slave_0 left promiscuous mode
[ 3435.785086] team0 (unregistering): Port device team_slave_1 removed
[ 3435.814237] team0 (unregistering): Port device team_slave_0 removed
[ 3435.852883] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 3435.923045] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 3436.111867] bond0 (unregistering): Released all slaves
[ 3436.232623] IPVS: ftp: loaded support on port[0] = 21
[ 3436.250488] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3436.768926] chnl_net:caif_netlink_parms(): no params data found
[ 3436.852300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3436.875518] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3436.884383] device bridge_slave_0 entered promiscuous mode
[ 3436.908384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3436.914909] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3436.924699] device bridge_slave_1 entered promiscuous mode
[ 3436.977817] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3437.024171] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3437.104867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3437.114312] team0: Port device team_slave_0 added
[ 3437.137615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3437.157708] team0: Port device team_slave_1 added
[ 3437.164146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3437.187176] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3437.270153] device hsr_slave_0 entered promiscuous mode
[ 3437.326770] device hsr_slave_1 entered promiscuous mode
[ 3437.366928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3437.375027] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3437.439887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3437.591144] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3437.636983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3437.679015] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3437.712285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3437.722689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3437.741616] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3437.754605] 8021q: adding VLAN 0 to HW filter on device team0
[ 3437.774922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3437.782920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3437.801268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3437.818801] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3437.825208] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3437.864740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 3437.888941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3437.909649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3437.938291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3437.957177] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3437.963609] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3437.993538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3438.001879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3438.024375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 3438.043408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3438.071272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 3438.101909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 3438.126211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3438.158174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3438.167918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3438.188011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3438.199418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3438.212846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 3438.227432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3438.242896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3438.259279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 3438.273259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3438.292470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3438.311990] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 3438.319308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3438.358720] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 3438.382360] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3438.534438] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000
[ 3438.572043] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 3438.579256] CPU: 0 PID: 20991 Comm: syz-executor.5 Not tainted 4.19.34 #2
[ 3438.586296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3438.595661] Call Trace:
[ 3438.598277]  dump_stack+0x172/0x1f0
[ 3438.601924]  dump_header+0x15e/0x929
[ 3438.605742]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3438.610881]  ? ___ratelimit+0x60/0x595
[ 3438.614789]  ? do_raw_spin_unlock+0x57/0x270
[ 3438.619228]  oom_kill_process.cold+0x10/0x6f5
[ 3438.623743]  ? task_will_free_mem+0x139/0x6e0
[ 3438.628256]  out_of_memory+0x936/0x12d0
[ 3438.632253]  ? oom_killer_disable+0x280/0x280
[ 3438.636762]  ? cgroup_file_notify+0x140/0x1b0
[ 3438.641283]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3438.646141]  ? memcg_event_wake+0x230/0x230
[ 3438.650486]  ? _raw_spin_unlock_irqrestore+0xbd/0xe0
[ 3438.655605]  ? cgroup_file_notify+0x140/0x1b0
[ 3438.660129]  memory_max_write+0x169/0x300
[ 3438.664298]  ? mem_cgroup_write+0x360/0x360
[ 3438.668636]  ? lock_acquire+0x16f/0x3f0
[ 3438.672626]  ? kernfs_fop_write+0x227/0x480
[ 3438.676976]  cgroup_file_write+0x245/0x7a0
[ 3438.681233]  ? mem_cgroup_write+0x360/0x360
[ 3438.685569]  ? cgroup_migrate_add_task+0x8a0/0x8a0
[ 3438.690693]  ? cgroup_migrate_add_task+0x8a0/0x8a0
[ 3438.695637]  kernfs_fop_write+0x2ba/0x480
[ 3438.699808]  __vfs_write+0x116/0x820
[ 3438.703538]  ? kernfs_fop_open+0xd90/0xd90
[ 3438.707825]  ? kernel_read+0x120/0x120
[ 3438.711733]  ? __lock_is_held+0xb6/0x140
[ 3438.715828]  ? rcu_read_lock_sched_held+0x110/0x130
[ 3438.720862]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 3438.725635]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3438.731188]  ? __sb_start_write+0x1ac/0x360
[ 3438.735526]  vfs_write+0x20c/0x560
[ 3438.739090]  ksys_write+0xea/0x1f0
[ 3438.742648]  ? __ia32_sys_read+0xb0/0xb0
[ 3438.746722]  ? do_syscall_64+0x26/0x610
[ 3438.750717]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3438.756103]  ? do_syscall_64+0x26/0x610
[ 3438.760117]  __x64_sys_write+0x73/0xb0
[ 3438.764029]  do_syscall_64+0x103/0x610
[ 3438.767936]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3438.773135] RIP: 0033:0x458c29
[ 3438.776344] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3438.795262] RSP: 002b:00007f5c692e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3438.802989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[ 3438.810269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 3438.817550] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 3438.824830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c692ea6d4
[ 3438.832124] R13: 00000000004c868e R14: 00000000004dedf8 R15: 00000000ffffffff
[ 3438.846454] Task in /syz5 killed as a result of limit of /syz5
[ 3438.852590] memory: usage 17560kB, limit 0kB, failcnt 431
[ 3438.858716] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3438.866092] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3438.872771] Memory cgroup stats for /syz5: cache:8KB rss:4260KB rss_huge:4096KB shmem:40KB mapped_file:132KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:4200KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3438.894752] Memory cgroup out of memory: Kill process 20989 (syz-executor.5) score 9784000 or sacrifice child
[ 3438.905779] Killed process 20989 (syz-executor.5) total-vm:72588kB, anon-rss:4184kB, file-rss:34816kB, shmem-rss:0kB
[ 3438.938498] oom_reaper: reaped process 20989 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
08:48:01 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x23)
io_setup(0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
writev(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="bac1df47808d1fcbf613f478bda0c23b2842cd38aaa223a4b6ad6d542d2af7b7b7c0f801121f49719f10666b1c6589f02867297829401304eb71eacdbc61c259ab50e784cc2690a1fa07e40476dcf33e73fd9b09d8812d0b22a27a3fdf1d958515a153eaef5fea0611ad0d8cce331502263eb98d9563cc09d889cefa77602e28eeec6c8c99448df909e749c599546637b999379d10fe0948e00d09a8501a6751d3deab5bb012bec4e5b24800a87aa4efbe4ae047cffe7b946908b1c1b86983f89a46d91156f4944f40f5", 0xca}], 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x354daf895057b821)
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000000)={0xffffffffffff02a9, 0x9, 0x2})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001, 0x0, 0x0, 0x1000000000054}, 0x98)

08:48:01 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="803804003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:01 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:01 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7b01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:01 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3439.059093] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0
[ 3439.131012] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 3439.166405] CPU: 1 PID: 20986 Comm: syz-executor.5 Not tainted 4.19.34 #2
[ 3439.175287] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3439.189804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3439.189817] Call Trace:
[ 3439.189859]  dump_stack+0x172/0x1f0
[ 3439.189882]  dump_header+0x15e/0x929
[ 3439.189899]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3439.189913]  ? ___ratelimit+0x60/0x595
[ 3439.189927]  ? do_raw_spin_unlock+0x57/0x270
[ 3439.189943]  oom_kill_process.cold+0x10/0x6f5
08:48:01 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3439.189960]  ? task_will_free_mem+0x139/0x6e0
[ 3439.189981]  out_of_memory+0x936/0x12d0
[ 3439.189999]  ? lock_downgrade+0x810/0x810
[ 3439.190018]  ? oom_killer_disable+0x280/0x280
[ 3439.190032]  ? find_held_lock+0x35/0x130
[ 3439.190061]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3439.190086]  ? memcg_event_wake+0x230/0x230
[ 3439.190105]  ? do_raw_spin_unlock+0x57/0x270
[ 3439.190120]  ? _raw_spin_unlock+0x2d/0x50
[ 3439.190141]  try_charge+0x1028/0x15b0
[ 3439.190154]  ? find_held_lock+0x35/0x130
[ 3439.190178]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3439.190200]  ? kasan_check_read+0x11/0x20
[ 3439.190219]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3439.190240]  mem_cgroup_try_charge+0x24d/0x5e0
[ 3439.190261]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 3439.190277]  wp_page_copy+0x430/0x16a0
[ 3439.190299]  ? follow_pfn+0x2a0/0x2a0
[ 3439.190315]  ? kasan_check_read+0x11/0x20
[ 3439.190329]  ? do_raw_spin_unlock+0x57/0x270
[ 3439.190346]  do_wp_page+0x57d/0x10b0
[ 3439.190363]  ? finish_mkwrite_fault+0x4f0/0x4f0
[ 3439.190377]  ? kasan_check_write+0x14/0x20
[ 3439.190391]  ? do_raw_spin_lock+0xc8/0x240
[ 3439.190412]  __handle_mm_fault+0x230a/0x3f80
[ 3439.190432]  ? vmf_insert_mixed_mkwrite+0x90/0x90
[ 3439.190447]  ? find_held_lock+0x35/0x130
[ 3439.190462]  ? handle_mm_fault+0x322/0xb30
[ 3439.190489]  ? kasan_check_read+0x11/0x20
[ 3439.190507]  handle_mm_fault+0x43f/0xb30
[ 3439.190532]  __do_page_fault+0x62a/0xe90
[ 3439.190556]  ? vmalloc_fault+0x770/0x770
[ 3439.190576]  ? trace_hardirqs_off_caller+0x65/0x220
[ 3439.190589]  ? trace_hardirqs_on_caller+0x6a/0x220
[ 3439.190621]  ? page_fault+0x8/0x30
[ 3439.242895]  do_page_fault+0x71/0x581
[ 3439.242918]  ? page_fault+0x8/0x30
[ 3439.242930]  page_fault+0x1e/0x30
[ 3439.242941] RIP: 0033:0x42fdb6
08:48:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3439.242957] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ac 51 62 00 85 c0 0f 84
[ 3439.242964] RSP: 002b:00007ffd0afba110 EFLAGS: 00010206
[ 3439.242979] RAX: 0000000000019691 RBX: 0000000000713640 RCX: 0000000000008041
[ 3439.242986] RDX: 0000000001b13930 RSI: 0000000001b1b970 RDI: 0000000000000003
[ 3439.242993] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001b12940
[ 3439.243001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698
[ 3439.243008] R13: 0000000000713698 R14: 0000000000000000 R15: 0000000000002710
[ 3439.311370] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3439.431170] Task in 
[ 3439.453697] EXT4-fs (loop4): inodes count not valid: 276608 vs 128
[ 3439.472460] /syz5
[ 3439.498879]  killed as a result of limit of 
[ 3439.535705] /syz5
[ 3439.563331] memory: usage 13128kB, limit 0kB, failcnt 439
[ 3439.570180] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3439.589758] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
08:48:01 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800005003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:01 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3439.627864] Memory cgroup stats for /syz5: cache:8KB rss:100KB rss_huge:0KB shmem:40KB mapped_file:132KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3439.692649] Memory cgroup out of memory: Kill process 20986 (syz-executor.5) score 8755000 or sacrifice child
[ 3439.749555] Killed process 20986 (syz-executor.5) total-vm:72324kB, anon-rss:72kB, file-rss:34824kB, shmem-rss:0kB
[ 3439.812808] oom_reaper: reaped process 20986 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
[ 3439.916454] EXT4-fs (loop4): inodes count not valid: 327808 vs 128
[ 3440.035554] protocol 88fb is buggy, dev hsr_slave_0
[ 3440.053047] protocol 88fb is buggy, dev hsr_slave_1
08:48:02 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x23)
io_setup(0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
writev(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="bac1df47808d1fcbf613f478bda0c23b2842cd38aaa223a4b6ad6d542d2af7b7b7c0f801121f49719f10666b1c6589f02867297829401304eb71eacdbc61c259ab50e784cc2690a1fa07e40476dcf33e73fd9b09d8812d0b22a27a3fdf1d958515a153eaef5fea0611ad0d8cce331502263eb98d9563cc09d889cefa77602e28eeec6c8c99448df909e749c599546637b999379d10fe0948e00d09a8501a6751d3deab5bb012bec4e5b24800a87aa4efbe4ae047cffe7b946908b1c1b86983f89a46d91156f4944f40f5", 0xca}], 0x1)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000000)={0xffffffffffff02a9, 0x9, 0x2})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x80000001, 0x0, 0x0, 0x1000000000054}, 0x98)

08:48:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:02 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800006003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:02 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3440.173287] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3440.264551] EXT4-fs (loop4): inodes count not valid: 393344 vs 128
[ 3440.315218] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:02 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3440.619058] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3440.862667] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:03 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:03 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800007003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:03 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc\r\x00\xe8E\xc5\x97\xb8PS7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x800000000000000d)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
unshare(0x400)
fcntl$notify(r1, 0x402, 0x2)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
read$alg(r2, &(0x7f0000000200)=""/129, 0x81)
fcntl$notify(r0, 0x402, 0x0)

[ 3441.056041] EXT4-fs (loop4): inodes count not valid: 458880 vs 128
[ 3441.076057] protocol 88fb is buggy, dev hsr_slave_0
[ 3441.081873] protocol 88fb is buggy, dev hsr_slave_1
[ 3441.088131] protocol 88fb is buggy, dev hsr_slave_0
[ 3441.094003] protocol 88fb is buggy, dev hsr_slave_1
[ 3441.100381] protocol 88fb is buggy, dev hsr_slave_0
[ 3441.106223] protocol 88fb is buggy, dev hsr_slave_1
[ 3441.112002] protocol 88fb is buggy, dev hsr_slave_0
[ 3441.117843] protocol 88fb is buggy, dev hsr_slave_1
08:48:03 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:03 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800009003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:03 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3441.411202] EXT4-fs (loop4): inodes count not valid: 589952 vs 128
08:48:03 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:03 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:03 executing program 2:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3441.735795] EXT4-fs (loop4): inodes count not valid: 655488 vs 128
[ 3441.922192] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3442.041882] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3442.308912] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:04 executing program 2:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3442.536646] device bridge_slave_1 left promiscuous mode
[ 3442.552038] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3442.617707] device bridge_slave_0 left promiscuous mode
[ 3442.623338] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3442.919595] device hsr_slave_1 left promiscuous mode
[ 3442.983836] device hsr_slave_0 left promiscuous mode
[ 3443.064948] team0 (unregistering): Port device team_slave_1 removed
[ 3443.114015] team0 (unregistering): Port device team_slave_0 removed
[ 3443.161047] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 3443.245357] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 3443.470884] bond0 (unregistering): Released all slaves
08:48:05 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7d00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:05 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:05 executing program 0:
socket$packet(0x11, 0x3, 0x300)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(0xffffffffffffffff, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:05 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3443.580069] IPVS: ftp: loaded support on port[0] = 21
[ 3443.701065] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3443.705123] EXT4-fs (loop4): inodes count not valid: 786560 vs 128
[ 3444.669345] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3444.799102] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3445.104385] chnl_net:caif_netlink_parms(): no params data found
[ 3445.239210] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3445.527660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3445.547805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3445.574841] device bridge_slave_0 entered promiscuous mode
[ 3445.603965] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3445.619023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3445.632479] device bridge_slave_1 entered promiscuous mode
[ 3445.684132] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3445.899251] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3445.920629] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3446.067425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3446.093829] team0: Port device team_slave_0 added
[ 3446.129254] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3446.148632] team0: Port device team_slave_1 added
[ 3446.155271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3446.187214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3446.270265] device hsr_slave_0 entered promiscuous mode
[ 3446.326768] device hsr_slave_1 entered promiscuous mode
[ 3446.366942] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3446.375087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3446.424145] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3446.562163] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3446.583362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3446.610168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3446.623685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3446.640315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3446.660738] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3446.667704] 8021q: adding VLAN 0 to HW filter on device team0
[ 3446.690393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3446.702535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3446.717231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3446.727671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3446.734152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3446.749612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 3446.758430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3446.769443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3446.779744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3446.790068] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3446.796583] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3446.810370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3446.818673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3446.836390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 3446.844301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3446.864511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3446.891566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3446.902517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3446.930361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3446.940463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3446.957691] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 3446.964532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3446.993624] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 3447.015550] 8021q: adding VLAN 0 to HW filter on device batadv0
08:48:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="04630440000000000763044000000000"], 0x0, 0x0, 0x0})

08:48:09 executing program 2:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:09 executing program 0:
socket$packet(0x11, 0x3, 0x300)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(0xffffffffffffffff, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800410003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:09 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7d00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:09 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7d01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3447.664451] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3447.690904] EXT4-fs (loop4): inodes count not valid: 1049728 vs 128
08:48:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3447.718419] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3447.731131] binder: 21103:21106 Acquire 1 refcount change on invalid ref 0 ret -22
[ 3447.745236] binder: 21103:21106 IncRefs 0 refcount change on invalid ref 0 ret -22
08:48:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800020003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:09 executing program 0:
socket$packet(0x11, 0x3, 0x300)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(0xffffffffffffffff, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3447.796987] binder: 21103:21106 DecRefs 0 refcount change on invalid ref 0 ret -22
08:48:10 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000480)='\x00')

08:48:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3447.975704] EXT4-fs (loop4): inodes count not valid: 2097280 vs 128
08:48:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800022003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:10 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380))
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:48:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3448.304878] EXT4-fs (loop4): inodes count not valid: 2228352 vs 128
08:48:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3448.702226] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3448.918787] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:11 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7d01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3449.154751] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:11 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7e00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800023003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:11 executing program 5:
r0 = socket(0x1, 0x1, 0x0)
stat(0x0, 0x0)
r1 = gettid()
semget(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0xfffffffffffffe7a)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54)
tkill(r1, 0x1020000000016)

[ 3449.440356] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:11 executing program 0:
socket$packet(0x11, 0x0, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:11 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x40044581, 0x0)

08:48:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3449.687607] EXT4-fs (loop4): inodes count not valid: 2293888 vs 128
08:48:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80002c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:12 executing program 0:
socket$packet(0x11, 0x0, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3450.082093] EXT4-fs (loop4): inodes count not valid: 2883712 vs 128
[ 3450.231603] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:12 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7e00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3450.573042] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:12 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7e01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$unix(0x1, 0x5, 0x0)
poll(&(0x7f0000000140)=[{r1}, {r1}], 0x2, 0x0)

08:48:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80002d003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:12 executing program 0:
socket$packet(0x11, 0x0, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3450.764788] EXT4-fs (loop4): inodes count not valid: 2949248 vs 128
08:48:13 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x0)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80022e003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3451.097926] EXT4-fs (loop4): inodes count not valid: 3015296 vs 128
08:48:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:13 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x0)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3451.390407] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3451.498553] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:14 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7e01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800437003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:14 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x0)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:14 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7f00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200))
r2 = syz_open_pts(r1, 0x0)
readv(r2, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}], 0x1)

08:48:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:14 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(0x0, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3452.434833] EXT4-fs (loop4): inodes count not valid: 3605632 vs 128
08:48:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800438003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3452.750599] EXT4-fs (loop4): inodes count not valid: 3671168 vs 128
08:48:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80003f003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3453.026678] EXT4-fs (loop4): inodes count not valid: 4128896 vs 128
[ 3453.121506] nla_parse: 3 callbacks suppressed
[ 3453.121554] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3453.248417] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3453.502841] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:15 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7f00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:15 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800040003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:15 executing program 5:
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

08:48:15 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(0x0, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:15 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7f01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3453.800547] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3453.828249] EXT4-fs (loop4): inodes count not valid: 4194432 vs 128
08:48:16 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(0x0, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3453.851980] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0463044000000000076304400000000000"], 0x0, 0x0, 0x0})

08:48:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800048003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3454.090345] binder: 21275:21281 unknown command 0
[ 3454.099215] EXT4-fs (loop4): inodes count not valid: 4718720 vs 128
[ 3454.106671] binder: 21275:21281 ioctl c0306201 20000680 returned -22
08:48:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80004c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3454.349344] EXT4-fs (loop4): inodes count not valid: 4980864 vs 128
[ 3454.595522] protocol 88fb is buggy, dev hsr_slave_0
[ 3454.600809] protocol 88fb is buggy, dev hsr_slave_1
[ 3454.700472] binder: BINDER_SET_CONTEXT_MGR already set
[ 3454.717312] binder: 21275:21276 ioctl 40046207 0 returned -16
[ 3454.746044] binder: 21275:21291 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 3454.770091] binder: 21275:21291 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 3454.800181] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3454.804286] binder: 21275:21291 unknown command 0
[ 3454.819237] binder: 21275:21291 ioctl c0306201 20000680 returned -22
[ 3455.043718] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3455.303364] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:17 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7f01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:17 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800060003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:17 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8), &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:17 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)

08:48:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3455.719056] EXT4-fs (loop4): inodes count not valid: 6291584 vs 128
[ 3455.731058] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:17 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800068003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:18 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8), &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100))

[ 3456.093666] EXT4-fs (loop4): inodes count not valid: 6815872 vs 128
08:48:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80006c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3456.591860] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3456.615914] EXT4-fs (loop4): inodes count not valid: 7078016 vs 128
08:48:18 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8), &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:19 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800074003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:19 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:19 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, 0x0)
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:19 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:19 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}], 0x1)

08:48:19 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, 0x0)
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3457.901381] EXT4-fs (loop4): inodes count not valid: 7602304 vs 128
08:48:20 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00G%\xb7\n\xd6\x18\xee\x1d\x00', 0x202})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1000030a)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup2(r1, r0)

08:48:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80007a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3458.258464] EXT4-fs (loop4): inodes count not valid: 7995520 vs 128
08:48:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000c0003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3458.469947] EXT4-fs (loop4): inodes count not valid: 12583040 vs 128
08:48:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000e5003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:20 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3458.659822] nla_parse: 4 callbacks suppressed
[ 3458.659833] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3458.684901] EXT4-fs (loop4): inodes count not valid: 15007872 vs 128
[ 3458.871843] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3459.173114] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:21 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800fff003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:21 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, 0x0)
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:21 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'eql\x00\x00G%\xb7\n\xd6\x18\xee\x1d\x00', 0x202})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1000030a)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup2(r1, r0)

08:48:21 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:21 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:21 executing program 0:
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(0xffffffffffffffff, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[ 3459.570641] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3459.589429] EXT4-fs (loop4): inodes count not valid: 16715648 vs 128
08:48:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000006504000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3459.667697] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:21 executing program 0:
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(0xffffffffffffffff, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:21 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 3459.825619] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3459.868071] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3459.885502] protocol 88fb is buggy, dev hsr_slave_0
[ 3459.890784] protocol 88fb is buggy, dev hsr_slave_1
[ 3459.921005] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3459.965910] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:48:22 executing program 0:
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(0xffffffffffffffff, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:22 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1, 0x0, 0x1d}}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x214, 0x0)

[ 3460.012882] EXT4-fs (loop4): get root inode failed
[ 3460.025830] EXT4-fs (loop4): mount failed
[ 3460.491425] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3460.692903] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3460.962780] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:23 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800002003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:23 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, 0x0, 0x0)

08:48:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x80002, 0x32, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0xffffffffffffffe0, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0x61)

08:48:23 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:23 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3461.247737] EXT4-fs (loop4): inodes count not valid: 131200 vs 128
[ 3461.267214] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800003003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x80002, 0x32, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0xffffffffffffffe0, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0x61)

[ 3461.352788] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:23 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, 0x0, 0x0)

[ 3461.473317] EXT4-fs (loop4): inodes count not valid: 196736 vs 128
08:48:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800004003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:23 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, 0x0, 0x0)

[ 3461.762010] EXT4-fs (loop4): inodes count not valid: 262272 vs 128
08:48:24 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100), 0x0)

08:48:25 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:25 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800005003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:25 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100), 0x0)

08:48:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x5000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')

08:48:25 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:25 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100), 0x0)

[ 3463.230634] EXT4-fs (loop4): inodes count not valid: 327808 vs 128
08:48:25 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100", 0x14)

08:48:25 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800006003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:25 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100", 0x14)

08:48:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3463.837855] EXT4-fs (loop4): inodes count not valid: 393344 vs 128
08:48:26 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100", 0x14)

[ 3463.898916] nla_parse: 5 callbacks suppressed
[ 3463.898933] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3464.039362] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3464.253299] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3464.514055] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:26 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:26 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x20, 0x21, 0x101}, 0x20}}, 0x0)

08:48:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800007003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:26 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a", 0x1e)

08:48:27 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:27 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3464.869901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3464.896863] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3464.926324] EXT4-fs (loop4): inodes count not valid: 458880 vs 128
08:48:27 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a", 0x1e)

08:48:27 executing program 5:

08:48:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800008003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:27 executing program 5:

[ 3465.180240] EXT4-fs (loop4): inodes count not valid: 524416 vs 128
08:48:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800009003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:27 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a", 0x1e)

[ 3465.435307] EXT4-fs (loop4): inodes count not valid: 589952 vs 128
[ 3465.771289] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3465.839014] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3466.083821] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3466.274506] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:28 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:28 executing program 5:

08:48:28 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23)

08:48:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:28 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:28 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:28 executing program 5:

[ 3466.703117] EXT4-fs (loop4): inodes count not valid: 655488 vs 128
08:48:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:29 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23)

08:48:29 executing program 5:

[ 3466.958335] EXT4-fs (loop4): inodes count not valid: 786560 vs 128
08:48:29 executing program 5:

08:48:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800022003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3467.226681] EXT4-fs (loop4): inodes count not valid: 2228352 vs 128
[ 3467.531296] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000
[ 3467.566624] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3467.572067] CPU: 1 PID: 21542 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3467.579018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3467.588387] Call Trace:
[ 3467.591004]  dump_stack+0x172/0x1f0
[ 3467.594661]  dump_header+0x15e/0x929
[ 3467.598389]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3467.603510]  ? ___ratelimit+0x60/0x595
[ 3467.607413]  ? do_raw_spin_unlock+0x57/0x270
[ 3467.611839]  oom_kill_process.cold+0x10/0x6f5
[ 3467.616356]  ? task_will_free_mem+0x139/0x6e0
[ 3467.620881]  out_of_memory+0x936/0x12d0
[ 3467.624870]  ? lock_downgrade+0x810/0x810
[ 3467.629038]  ? oom_killer_disable+0x280/0x280
[ 3467.633544]  ? find_held_lock+0x35/0x130
[ 3467.637630]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3467.642482]  ? memcg_event_wake+0x230/0x230
[ 3467.646821]  ? do_raw_spin_unlock+0x57/0x270
[ 3467.651251]  ? _raw_spin_unlock+0x2d/0x50
[ 3467.655516]  try_charge+0x1028/0x15b0
[ 3467.659330]  ? find_held_lock+0x35/0x130
[ 3467.663411]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3467.668281]  ? kasan_check_read+0x11/0x20
[ 3467.672466]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3467.677329]  mem_cgroup_try_charge+0x24d/0x5e0
[ 3467.682118]  mem_cgroup_try_charge_delay+0x1f/0xa0
[ 3467.687074]  __handle_mm_fault+0x1e55/0x3f80
[ 3467.691544]  ? vmf_insert_mixed_mkwrite+0x90/0x90
[ 3467.696415]  ? find_held_lock+0x35/0x130
[ 3467.700587]  ? handle_mm_fault+0x322/0xb30
[ 3467.704850]  ? kasan_check_read+0x11/0x20
[ 3467.709019]  handle_mm_fault+0x43f/0xb30
[ 3467.713119]  __do_page_fault+0x62a/0xe90
[ 3467.717197]  ? vmalloc_fault+0x770/0x770
[ 3467.721272]  ? trace_hardirqs_off_caller+0x65/0x220
[ 3467.726295]  ? trace_hardirqs_on_caller+0x6a/0x220
[ 3467.731242]  ? page_fault+0x8/0x30
[ 3467.734830]  do_page_fault+0x71/0x581
[ 3467.738645]  ? page_fault+0x8/0x30
[ 3467.742196]  page_fault+0x1e/0x30
[ 3467.745655] RIP: 0033:0x41063f
[ 3467.748859] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41
[ 3467.767784] RSP: 002b:00007fff4a8c6a30 EFLAGS: 00010206
[ 3467.773176] RAX: 00007f9926a8e000 RBX: 0000000000020000 RCX: 0000000000458c7a
[ 3467.780458] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000
[ 3467.787767] RBP: 00007fff4a8c6b10 R08: ffffffffffffffff R09: 0000000000000000
[ 3467.795233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4a8c6bf0
[ 3467.802515] R13: 00007f9926aae700 R14: 0000000000000003 R15: 000000000073c18c
[ 3467.848012] Task in /syz3 killed as a result of limit of /syz3
[ 3467.854209] memory: usage 307200kB, limit 307200kB, failcnt 3929
[ 3467.866968] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3467.873767] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3467.884450] Memory cgroup stats for /syz3: cache:56KB rss:159404KB rss_huge:147456KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:159528KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3467.912427] Memory cgroup out of memory: Kill process 13062 (syz-executor.3) score 1110 or sacrifice child
[ 3467.922817] Killed process 13062 (syz-executor.3) total-vm:72452kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 3467.967572] syz-executor.3 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=1000
[ 3467.994531] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3468.003635] CPU: 1 PID: 21549 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3468.010586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3468.020130] Call Trace:
[ 3468.022742]  dump_stack+0x172/0x1f0
[ 3468.026392]  dump_header+0x15e/0x929
[ 3468.030134]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3468.035260]  ? ___ratelimit+0x60/0x595
[ 3468.039159]  ? do_raw_spin_unlock+0x57/0x270
[ 3468.043607]  oom_kill_process.cold+0x10/0x6f5
[ 3468.048227]  ? task_will_free_mem+0x139/0x6e0
[ 3468.052747]  out_of_memory+0x936/0x12d0
[ 3468.056770]  ? oom_killer_disable+0x280/0x280
[ 3468.061280]  ? find_held_lock+0x35/0x130
[ 3468.065363]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3468.070223]  ? memcg_event_wake+0x230/0x230
[ 3468.074564]  ? do_raw_spin_unlock+0x57/0x270
[ 3468.079013]  ? _raw_spin_unlock+0x2d/0x50
[ 3468.083184]  try_charge+0xd25/0x15b0
[ 3468.087107]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3468.091973]  ? rcu_read_lock_sched_held+0x110/0x130
[ 3468.096998]  ? __alloc_pages_nodemask+0x63e/0x760
[ 3468.101863]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3468.106554]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3468.111078]  ? cache_grow_begin+0x59a/0x8c0
[ 3468.115425]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3468.120024]  ? trace_hardirqs_on+0x67/0x230
[ 3468.124382]  cache_grow_begin+0x25f/0x8c0
[ 3468.128550]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 3468.134111]  ? __cpuset_node_allowed+0x136/0x540
[ 3468.138912]  fallback_alloc+0x1fd/0x2d0
[ 3468.142909]  ____cache_alloc_node+0x1be/0x1e0
[ 3468.147527]  kmem_cache_alloc+0x1f3/0x700
[ 3468.151719]  ? lookup_one_len+0x10e/0x1a0
[ 3468.155891]  alloc_inode+0xb8/0x190
[ 3468.159530]  new_inode_pseudo+0x19/0xf0
[ 3468.163514]  new_inode+0x1f/0x40
[ 3468.166914]  debugfs_get_inode+0x1a/0x130
[ 3468.171075]  __debugfs_create_file+0xb9/0x400
[ 3468.175599]  debugfs_create_file+0x5a/0x70
[ 3468.179854]  cfg80211_debugfs_rdev_add+0x60/0xf0
[ 3468.184637]  wiphy_register+0x1a5e/0x23e0
[ 3468.188810]  ? wiphy_unregister+0x10b0/0x10b0
[ 3468.193403]  ? retint_kernel+0x2d/0x2d
[ 3468.197311]  ? ieee80211_register_hw+0x27b3/0x3860
[ 3468.202255]  ieee80211_register_hw+0x1568/0x3860
[ 3468.207033]  ? ieee80211_ifa_changed+0xc70/0xc70
[ 3468.211801]  ? tasklet_hrtimer_init+0x9e/0x180
[ 3468.216393]  ? tasklet_hrtimer_init+0xe0/0x180
[ 3468.221083]  mac80211_hwsim_new_radio+0x1ca4/0x3e30
[ 3468.226146]  ? hwsim_exit_net+0xc50/0xc50
[ 3468.230310]  ? hwsim_new_radio_nl+0x213/0x893
[ 3468.234822]  hwsim_new_radio_nl+0x5eb/0x893
[ 3468.239160]  ? mac80211_hwsim_new_radio+0x3e30/0x3e30
[ 3468.244363]  ? retint_kernel+0x2d/0x2d
[ 3468.248274]  ? mac80211_hwsim_new_radio+0x3e30/0x3e30
[ 3468.253508]  genl_family_rcv_msg+0x6e3/0xd40
[ 3468.257954]  ? genl_unregister_family+0x790/0x790
[ 3468.262835]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3468.267636]  genl_rcv_msg+0xca/0x16c
[ 3468.271367]  netlink_rcv_skb+0x180/0x460
[ 3468.275439]  ? genl_family_rcv_msg+0xd40/0xd40
[ 3468.280038]  ? netlink_ack+0xb60/0xb60
[ 3468.283940]  ? lock_acquire+0x1ea/0x3f0
[ 3468.287941]  genl_rcv+0x29/0x40
[ 3468.291232]  netlink_unicast+0x53c/0x720
[ 3468.295318]  ? netlink_attachskb+0x770/0x770
[ 3468.299833]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3468.305409]  netlink_sendmsg+0x8ae/0xd70
[ 3468.309491]  ? netlink_unicast+0x720/0x720
[ 3468.313746]  ? netlink_unicast+0x720/0x720
[ 3468.317995]  sock_sendmsg+0xdd/0x130
[ 3468.321722]  ___sys_sendmsg+0x806/0x930
[ 3468.325711]  ? copy_msghdr_from_user+0x430/0x430
[ 3468.330491]  ? lock_downgrade+0x810/0x810
[ 3468.334653]  ? kasan_check_read+0x11/0x20
[ 3468.338816]  ? __fget+0x367/0x540
[ 3468.342285]  ? iterate_fd+0x360/0x360
[ 3468.346109]  ? lock_downgrade+0x810/0x810
[ 3468.350278]  ? __fget_light+0x1a9/0x230
[ 3468.354266]  ? __fdget+0x1b/0x20
[ 3468.357650]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 3468.363208]  __sys_sendmsg+0x105/0x1d0
[ 3468.367122]  ? __ia32_sys_shutdown+0x80/0x80
[ 3468.371569]  __x64_sys_sendmsg+0x78/0xb0
[ 3468.375671]  do_syscall_64+0x103/0x610
[ 3468.379578]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3468.384778] RIP: 0033:0x458c29
[ 3468.389641] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3468.408594] RSP: 002b:00007f9926b31c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3468.416331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[ 3468.423616] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[ 3468.430954] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 3468.438321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9926b326d4
[ 3468.445785] R13: 00000000004c64a3 R14: 00000000004dadd8 R15: 00000000ffffffff
[ 3468.468083] Task in /syz3 killed as a result of limit of /syz3
[ 3468.474242] memory: usage 304956kB, limit 307200kB, failcnt 3929
[ 3468.510384] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3468.520515] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3468.536729] Memory cgroup stats for /syz3: cache:56KB rss:157264KB rss_huge:145408KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:157372KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3468.573421] Memory cgroup out of memory: Kill process 17570 (syz-executor.3) score 1110 or sacrifice child
[ 3468.584513] Killed process 17570 (syz-executor.3) total-vm:72440kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 3468.606145] oom_reaper: reaped process 17570 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 3469.031576] nla_parse: 4 callbacks suppressed
[ 3469.031591] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3469.317120] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:31 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:31 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23)

08:48:31 executing program 5:

08:48:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800023003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, 0x0, 0x0)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:31 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:31 executing program 5:

[ 3469.642363] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3469.733801] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:31 executing program 5:

08:48:32 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25)

[ 3469.847862] EXT4-fs (loop4): inodes count not valid: 2293888 vs 128
08:48:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80002c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:32 executing program 5:

08:48:32 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25)

[ 3470.265322] EXT4-fs (loop4): inodes count not valid: 2883712 vs 128
[ 3470.593715] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3470.789404] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3471.000005] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:33 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:33 executing program 5:

08:48:33 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25)

08:48:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, 0x0, 0x0)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80002d003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:33 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:33 executing program 5:

[ 3471.311533] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3471.337022] EXT4-fs (loop4): inodes count not valid: 2949248 vs 128
08:48:33 executing program 5:
clone(0x203, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000080)='./file0\x00', 0x103d, 0x0)
r0 = getpgrp(0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x8100027e, 0x0)

08:48:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, 0x0, 0x0)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3471.429340] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800048003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:33 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26)

[ 3471.575935] EXT4-fs (loop4): inodes count not valid: 4718720 vs 128
08:48:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80004c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3471.751940] EXT4-fs (loop4): inodes count not valid: 4980864 vs 128
[ 3472.350588] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:35 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:35 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
shutdown(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000)

08:48:35 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26)

08:48:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800060003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:35 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8501, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:35 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000140), 0x0)

08:48:35 executing program 0:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26)

[ 3473.479892] EXT4-fs (loop4): inodes count not valid: 6291584 vs 128
08:48:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800068003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:35 executing program 0:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5})
mq_timedsend(r0, 0x0, 0x0, 0x49, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mq_timedreceive(r0, &(0x7f00000000c0)=""/54, 0x36, 0x0, &(0x7f0000000100)={0x0, 0x989680})

08:48:35 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3473.847041] EXT4-fs (loop4): inodes count not valid: 6815872 vs 128
08:48:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80006c003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3474.132336] EXT4-fs (loop4): inodes count not valid: 7078016 vs 128
[ 3474.485557] nla_parse: 4 callbacks suppressed
[ 3474.485573] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:36 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8501, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:36 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800074003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, r1, 0x131, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}]}, 0x44}}, 0x0)

[ 3474.795955] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3474.913033] EXT4-fs (loop4): inodes count not valid: 7602304 vs 128
[ 3475.173383] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:37 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:37 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:37 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80007a003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:37 executing program 0:
socket$inet6(0xa, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x3)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
pipe(&(0x7f0000000340))
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)=""/178, &(0x7f0000000200)=0xb2)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000000c0))
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

[ 3475.397086] EXT4-fs (loop4): inodes count not valid: 7995520 vs 128
08:48:37 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:37 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000c0003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)=0x7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)

[ 3475.744413] EXT4-fs (loop4): inodes count not valid: 12583040 vs 128
[ 3475.880516] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:38 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:38 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:38 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000e5003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3475.945165] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3476.244540] EXT4-fs (loop4): inodes count not valid: 15007872 vs 128
[ 3476.485512] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3477.048669] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3477.312694] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:39 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8601, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:39 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80002e023804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:39 executing program 0:
r0 = socket$inet(0x2, 0x6, 0x10000)
bind$inet(r0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
pread64(r0, &(0x7f0000000280)=""/170, 0xaa, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$inet6(0xa, 0x200000000003, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x480400, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180))
syz_open_pts(r2, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)

08:48:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(0x0, &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:39 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:39 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 3477.648335] EXT4-fs (loop4): inodes count not valid: 36569216 vs 128
[ 3477.738667] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3477.833329] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:40 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8601, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:40 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:40 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000033804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:40 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1037b216649edc3c7ae38ce663e865bcc30900000000100000297e19db2b511fee035fab00020038728cd4e2a7ebeea5a54159a88679f0c224"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

08:48:40 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3478.054163] EXT4-fs (loop4): inodes count not valid: 50331776 vs 128
08:48:41 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800010043804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:41 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(0x0, &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:41 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0)
sendfile(r1, r2, 0x0, 0xc700000e)

08:48:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3479.445249] EXT4-fs (loop4): inodes count not valid: 68157568 vs 128
08:48:41 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xb, 0x6d, 0x2, 0x0, 0x0}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)='\\', 0x0}, 0x18)

[ 3479.542800] nla_parse: 3 callbacks suppressed
[ 3479.542848] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3479.675065] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:41 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8700, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:41 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800037043804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:42 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3479.837039] EXT4-fs (loop4): inodes count not valid: 70713472 vs 128
08:48:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3e4e, 0x0, 0x0, 0x3, 0x6})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/9, 0x9}, {0x0}], 0x2)

[ 3480.260189] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3480.341893] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3480.854243] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3481.140960] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:43 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8701, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800038043804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(0x0, &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:43 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1, 0x0, 0x1d}}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x214, 0x7ffffffff000)

[ 3481.272457] binder: 22947:22949 Acquire 1 refcount change on invalid ref 0 ret -22
[ 3481.296424] binder: 22947:22949 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 3481.310049] binder: 22947:22949 DecRefs 0 refcount change on invalid ref 0 ret -22
08:48:43 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3481.451248] EXT4-fs (loop4): inodes count not valid: 70779008 vs 128
08:48:43 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000600)=""/11, 0x232)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x20)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)

[ 3481.502685] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3481.513320] binder: 23055:23057 Acquire 1 refcount change on invalid ref 0 ret -22
[ 3481.542739] binder: 23055:23057 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 3481.572773] binder: 23055:23057 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 3481.705326] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:44 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8701, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:44 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000053804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:44 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x20)

[ 3481.923463] binder: 23160:23161 Acquire 1 refcount change on invalid ref 0 ret -22
[ 3481.978814] binder: 23160:23161 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 3482.010003] binder: 23160:23161 DecRefs 0 refcount change on invalid ref 0 ret -22
08:48:44 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3482.159019] EXT4-fs (loop4): inodes count not valid: 83886208 vs 128
[ 3482.450169] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3482.562817] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:45 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8800, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:45 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:45 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[])

08:48:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000063804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:45 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:45 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3483.355220] EXT4-fs (loop4): inodes count not valid: 100663424 vs 128
08:48:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000073804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:45 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8800, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:45 executing program 5:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e)
r0 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54)
setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockname$unix(r1, &(0x7f0000000680), &(0x7f0000000640)=0x3f)
pipe2$9p(&(0x7f0000000100), 0x800)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0)
getrusage(0x0, 0x0)
unshare(0x40000000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 3483.801992] EXT4-fs (loop4): inodes count not valid: 117440640 vs 128
08:48:46 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000093804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3484.185871] EXT4-fs (loop4): inodes count not valid: 150995072 vs 128
[ 3484.342807] IPVS: ftp: loaded support on port[0] = 21
[ 3484.600183] nla_parse: 4 callbacks suppressed
[ 3484.600200] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3485.112262] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:47 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8801, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:47 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000000a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8801, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3485.562964] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:48:47 executing program 5:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3485.616613] EXT4-fs (loop4): inodes count not valid: 167772288 vs 128
[ 3485.692060] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000000c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:48 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3486.000724] binder: 23430:23432 Acquire 1 refcount change on invalid ref 0 ret -22
08:48:48 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3486.120713] EXT4-fs (loop4): inodes count not valid: 201326720 vs 128
[ 3486.291434] binder_thread_write: 2 callbacks suppressed
[ 3486.291450] binder: 23433:23434 Acquire 1 refcount change on invalid ref 0 ret -22
[ 3486.368177] binder: 23433:23435 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 3486.383566] binder: 23433:23435 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 3486.745322] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3487.203420] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3487.875326] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:48:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000))
write(r0, &(0x7f0000000100)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

08:48:59 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800004103804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:48:59 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:59 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:48:59 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8900, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3497.283871] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3497.308908] binder: 23440:23450 Acquire 1 refcount change on invalid ref 0 ret -22
[ 3497.354352] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3497.364957] binder: 23440:23450 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 3497.399507] EXT4-fs (loop4): inodes count not valid: 268697728 vs 128
[ 3497.399738] binder: 23440:23450 DecRefs 0 refcount change on invalid ref 0 ret -22
08:48:59 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1b1, &(0x7f0000004bc0)}}], 0x19cbcb36e81760, 0x20004bc0)

08:48:59 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:48:59 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000203804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:48:59 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3497.771241] EXT4-fs (loop4): inodes count not valid: 536871040 vs 128
08:48:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x23)
io_setup(0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$CAPI_REGISTER(r1, 0x400c4301, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)

08:49:00 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000223804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:00 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:49:00 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x23)
io_setup(0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$CAPI_REGISTER(r1, 0x400c4301, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)

[ 3498.204720] EXT4-fs (loop4): inodes count not valid: 570425472 vs 128
[ 3498.249707] binder: 23684:23685 ioctl c0306201 0 returned -14
[ 3498.444135] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3498.781889] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3498.977174] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:01 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8901, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:01 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000233804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:01 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:01 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8901, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180))
syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

08:49:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3499.320336] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3499.332695] binder: 23799:23800 ioctl c0306201 0 returned -14
[ 3499.377327] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:01 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3499.463416] EXT4-fs (loop4): inodes count not valid: 587202688 vs 128
08:49:01 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000002c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:01 executing program 0:
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfffffe77)
unlink(&(0x7f0000000240)='./file0\x00')
clone(0x6100001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x35}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)

[ 3499.672140] binder: 23908:23909 ioctl c0306201 0 returned -14
[ 3499.729881] EXT4-fs (loop4): inodes count not valid: 738197632 vs 128
08:49:01 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:02 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000002d3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:02 executing program 0:
unshare(0x8000400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
splice(r0, 0x0, r1, &(0x7f0000000140), 0x5b1, 0x0)

[ 3499.971924] EXT4-fs (loop4): inodes count not valid: 754974848 vs 128
[ 3500.292748] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3500.410358] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:02 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8a00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:02 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:02 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000022e3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3500.709090] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3500.800363] EXT4-fs (loop4): inodes count not valid: 771883136 vs 128
08:49:03 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8a00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:03 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

08:49:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:49:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:03 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800004373804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3501.227341] EXT4-fs (loop4): inodes count not valid: 923009152 vs 128
08:49:03 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800004383804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:03 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:03 executing program 0:
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

[ 3501.461590] EXT4-fs (loop4): inodes count not valid: 939786368 vs 128
[ 3502.356836] nla_parse: 5 callbacks suppressed
[ 3502.356846] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:04 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8a01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:04 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000003f3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3502.450810] EXT4-fs (loop4): inodes count not valid: 1056964736 vs 128
08:49:04 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8a01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)

08:49:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:49:04 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000403804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3502.648915] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:04 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3502.768401] EXT4-fs (loop4): inodes count not valid: 1073741952 vs 128
08:49:05 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000483804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:05 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:05 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3503.259806] EXT4-fs (loop4): inodes count not valid: 1207959680 vs 128
[ 3503.381349] binder: 24501:24502 unknown command 25349
[ 3503.405567] binder: 24501:24502 ioctl c0306201 20007000 returned -22
[ 3503.464201] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3503.589045] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:06 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8b00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000004c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3503.853825] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3503.933012] binder: 24507:24508 unknown command 25349
[ 3503.950148] EXT4-fs (loop4): inodes count not valid: 1275068544 vs 128
[ 3503.973373] binder: 24507:24508 ioctl c0306201 20007000 returned -22
[ 3504.140879] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:06 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8b00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
clock_getres(0xfffffffffffffffe, 0x0)

08:49:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:49:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000603804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3504.241318] binder: 24518:24520 unknown command 25349
[ 3504.270657] EXT4-fs (loop4): inodes count not valid: 1610612864 vs 128
[ 3504.279949] binder: 24518:24520 ioctl c0306201 20007000 returned -22
08:49:06 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000683804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:06 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3504.407374] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
[ 3504.462053] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3504.480933] CPU: 1 PID: 24524 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3504.487913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3504.497305] Call Trace:
[ 3504.499927]  dump_stack+0x172/0x1f0
[ 3504.503579]  dump_header+0x15e/0x929
[ 3504.507311]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3504.512432]  ? ___ratelimit+0x60/0x595
[ 3504.516422]  ? do_raw_spin_unlock+0x57/0x270
[ 3504.521379]  oom_kill_process.cold+0x10/0x6f5
[ 3504.525925]  ? task_will_free_mem+0x139/0x6e0
[ 3504.530437]  ? find_held_lock+0x35/0x130
[ 3504.534519]  out_of_memory+0x936/0x12d0
[ 3504.538509]  ? lock_downgrade+0x810/0x810
[ 3504.542676]  ? oom_killer_disable+0x280/0x280
[ 3504.547182]  ? find_held_lock+0x35/0x130
[ 3504.551276]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3504.556147]  ? memcg_event_wake+0x230/0x230
[ 3504.560491]  ? do_raw_spin_unlock+0x57/0x270
[ 3504.564923]  ? _raw_spin_unlock+0x2d/0x50
[ 3504.569089]  try_charge+0x1028/0x15b0
[ 3504.572922]  ? find_held_lock+0x35/0x130
[ 3504.577023]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3504.581893]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3504.586781]  ? find_held_lock+0x35/0x130
[ 3504.590882]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3504.595883]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3504.600603]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3504.605143]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3504.610028]  memcg_kmem_charge+0x136/0x300
[ 3504.614301]  __alloc_pages_nodemask+0x3c6/0x760
[ 3504.619001]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3504.624058]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3504.628682]  ? trace_hardirqs_on+0x67/0x230
[ 3504.633049]  copy_process.part.0+0x3e0/0x7970
[ 3504.637576]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3504.642738]  ? delayacct_end+0x5c/0x100
[ 3504.646747]  ? __delayacct_freepages_end+0xe0/0x140
[ 3504.651805]  ? __lock_acquire+0x6eb/0x48f0
[ 3504.656082]  ? __cleanup_sighand+0x70/0x70
[ 3504.660358]  ? mark_held_locks+0x100/0x100
[ 3504.664631]  _do_fork+0x257/0xfe0
[ 3504.668130]  ? fork_idle+0x1d0/0x1d0
[ 3504.671874]  ? blkcg_print_stat+0xb90/0xb90
[ 3504.676230]  ? kasan_check_read+0x11/0x20
[ 3504.680410]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3504.685196]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3504.689987]  ? do_syscall_64+0x26/0x610
[ 3504.693995]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3504.699390]  ? do_syscall_64+0x26/0x610
[ 3504.703404]  __x64_sys_clone+0xbf/0x150
[ 3504.707418]  do_syscall_64+0x103/0x610
[ 3504.711369]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3504.716584] RIP: 0033:0x45b5f9
[ 3504.719794] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 3504.738724] RSP: 002b:00007fff4a8c69e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 3504.746466] RAX: ffffffffffffffda RBX: 00007f9926b11700 RCX: 000000000045b5f9
[ 3504.753774] RDX: 00007f9926b119d0 RSI: 00007f9926b10db0 RDI: 00000000003d0f00
[ 3504.761074] RBP: 00007fff4a8c6bf0 R08: 00007f9926b11700 R09: 00007f9926b11700
[ 3504.768457] R10: 00007f9926b119d0 R11: 0000000000000202 R12: 0000000000000000
[ 3504.775769] R13: 00007fff4a8c6a9f R14: 00007f9926b119c0 R15: 000000000073bfac
[ 3504.796016] EXT4-fs (loop4): inodes count not valid: 1744830592 vs 128
[ 3504.808029] binder: 24631:24632 unknown command 287493
08:49:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3504.814361] binder: 24631:24632 ioctl c0306201 20007000 returned -22
[ 3504.843721] Task in /syz3 killed as a result of limit of /syz3
[ 3504.851824] memory: usage 307196kB, limit 307200kB, failcnt 3973
[ 3504.859288] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3504.867086] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3504.873519] Memory cgroup stats for /syz3: cache:56KB rss:157084KB rss_huge:145408KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:157236KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3504.896155] Memory cgroup out of memory: Kill process 20085 (syz-executor.3) score 1110 or sacrifice child
[ 3504.932826] Killed process 20085 (syz-executor.3) total-vm:72452kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
08:49:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000006c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3504.992812] binder: 24633:24634 unknown command 287493
[ 3505.015282] binder: 24633:24634 ioctl c0306201 20007000 returned -22
[ 3505.091274] EXT4-fs (loop4): inodes count not valid: 1811939456 vs 128
[ 3505.243782] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3505.331501] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3505.533744] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:07 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8b01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:07 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:49:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000743804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:07 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x804e23, @empty}, 0x10)

08:49:07 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8b01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3505.880264] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3505.897871] binder: 24648:24652 unknown command 287493
[ 3505.924033] binder: 24648:24652 ioctl c0306201 20007000 returned -22
08:49:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3506.029889] EXT4-fs (loop4): inodes count not valid: 1946157184 vs 128
08:49:08 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000007a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3506.324793] EXT4-fs (loop4): inodes count not valid: 2046820480 vs 128
08:49:08 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000c03804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:08 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3506.689458] EXT4-fs (loop4): inodes count not valid: 3221225600 vs 128
08:49:08 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

08:49:09 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000e53804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:09 executing program 0:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x48c01, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
pivot_root(0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)

08:49:09 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3507.501060] nla_parse: 3 callbacks suppressed
[ 3507.501088] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3507.535898] EXT4-fs (loop4): inodes count not valid: 3841982592 vs 128
[ 3507.561431] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:09 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:09 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000fff3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:09 executing program 0:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x48c01, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
pivot_root(0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)

08:49:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18)

[ 3507.791838] EXT4-fs (loop4): inodes count not valid: 4279173248 vs 128
08:49:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:10 executing program 0:
r0 = socket(0x1000000000000010, 0x80802, 0x0)
write(r0, &(0x7f0000000080)="2400000058001f02ff07f4b29162a1000a04f511080001000201009f0800028001000000", 0x24)

08:49:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000a04000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3508.220598] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3508.241558] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3508.263219] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3508.304683] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3508.332530] EXT4-fs (loop4): get root inode failed
[ 3508.347214] EXT4-fs (loop4): mount failed
[ 3508.532758] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3508.833613] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3509.093028] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:11 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8c01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
dup2(r0, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:11 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)

08:49:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000023804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, 0x0, 0x0)

08:49:11 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8c01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
dup2(r0, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

[ 3509.448995] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:11 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="007f0000ff7f9128d1"])

[ 3509.546296] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3509.571864] EXT4-fs (loop4): inodes count not valid: 33554560 vs 128
08:49:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000033804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
dup2(r0, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007630440"], 0x0, 0x0, 0x0})

08:49:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

08:49:12 executing program 0:
shutdown(0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 3509.933428] EXT4-fs (loop4): inodes count not valid: 50331776 vs 128
[ 3510.015231] binder: 25047:25048 ioctl c0306201 0 returned -14
[ 3510.464247] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3510.711755] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3510.981946] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:13 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8d00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000043804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

08:49:13 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00W\xcb\xd53\xc0g\x8a\x1c\xc8m\x8f\xd3\x90\x1f+\x81\x9b\x90\b&\xa5\xd60\xb9\x9e\xcc\xaf3\xea:\aL\x03l\\\xdd\x84\xeeL\xeb,\xa5\xc1\xd4\xd4\xa9I\x87\x06\xfbH>SL\xddsRA\xf2\xf5!JnO\xa7l$\x00V\xa4^\xc7.z)\xc3\f\xee\xce\xec\vM\xcb\xb7\xaa\"[\x19\f\x87\xe4kEmO#\xab`/\xba\xf1\xe3^@:\x86\xff\xc4c\x81\xf0t\x9f7x\xb6\xa3\xedj\\\xbd\x8aK*2|\xdf\xc2[\xbf\x87J\a\xed\b\x8c;\x00\xdf\xab\xcb2\xde\x1f\x90\x1cY\x17+\xb1\x808\xc0\n\x96\x9cVp\x8dq\xba}]\x97\xac\xc9\x91\t\xb4\x97\x11?\xfe\xdf\x00'/190)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00\x01y.swaS.cur\x00\x01\x00\x00\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc0\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80\x00\x00\x00\x00\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

08:49:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, 0x0, 0x0)

08:49:13 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8d00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3511.303195] binder: 25157:25159 ioctl c0306201 0 returned -14
08:49:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

08:49:13 executing program 0:
seccomp(0x0, 0x0, 0x0)
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})

[ 3511.535604] EXT4-fs (loop4): inodes count not valid: 67108992 vs 128
[ 3511.574348] binder: 25272:25273 ioctl c0306201 0 returned -14
08:49:13 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000053804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3511.694631] audit: type=1326 audit(1555318153.830:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=25274 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0
08:49:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3511.903674] EXT4-fs (loop4): inodes count not valid: 83886208 vs 128
[ 3511.927163] audit: type=1326 audit(1555318154.060:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=25274 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0
08:49:14 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000063804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3512.240970] EXT4-fs (loop4): inodes count not valid: 100663424 vs 128
[ 3512.490981] audit: type=1326 audit(1555318154.630:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=25274 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0
[ 3512.667236] nla_parse: 3 callbacks suppressed
[ 3512.667247] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3512.983191] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:15 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8d01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

08:49:15 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, 0x0, 0x0)

08:49:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000073804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:15 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'})

08:49:15 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8d01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0})

[ 3513.340580] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3513.373547] EXT4-fs (loop4): inodes count not valid: 117440640 vs 128
[ 3513.417309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:15 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000083804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x118)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000000)="410f01f9640ff88e0900000064ff0941c3c48210f77e0b3e46d8731266420fe2e33e0f111083d4b842419dc4417c7715346b")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4, 0x0, 0x2}, 0x20)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000800)='tls\x00', 0x4)

08:49:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0})

08:49:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0})

[ 3513.738519] EXT4-fs (loop4): inodes count not valid: 134217856 vs 128
08:49:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

[ 3514.292759] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3514.595219] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:16 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8e00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000093804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18)

08:49:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

08:49:16 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x900, 0x80)
r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00')
rt_tgsigqueueinfo(0x0, 0x0, 0x13, 0x0)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x4c, r2, 0x204, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048044}, 0x94)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000))
recvfrom$unix(r1, &(0x7f0000000440)=""/98, 0x62, 0x40010000, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x440)

[ 3514.755551] EXT4-fs (loop4): inodes count not valid: 150995072 vs 128
[ 3515.169814] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:17 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8e00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

08:49:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000000a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:17 executing program 0:
socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
getdents(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
pipe(&(0x7f0000000340))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/178, &(0x7f0000000200)=0xb2)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0))
openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14)
sendmsg$tipc(r0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

08:49:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000"], 0x0, 0x0, 0x0})

[ 3515.399887] EXT4-fs (loop4): inodes count not valid: 167772288 vs 128
08:49:17 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18)

08:49:17 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000223804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3515.735358] EXT4-fs (loop4): inodes count not valid: 570425472 vs 128
[ 3515.785111] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3515.903743] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3516.404533] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:18 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8e01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:18 executing program 0:

08:49:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000"], 0x0, 0x0, 0x0})

08:49:18 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000233804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=@random={'system.', '\x00'}, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18}, 0x18)

[ 3516.916689] EXT4-fs (loop4): inodes count not valid: 587202688 vs 128
08:49:19 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8e01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:19 executing program 0:

08:49:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000"], 0x0, 0x0, 0x0})

08:49:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000002c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:19 executing program 0:

08:49:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x9, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007"], 0x0, 0x0, 0x0})

[ 3517.390320] EXT4-fs (loop4): inodes count not valid: 738197632 vs 128
08:49:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000002d3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3517.587176] binder: 25789:25790 unknown command 7
[ 3517.610390] binder: 25789:25790 ioctl c0306201 20000680 returned -22
[ 3517.699880] EXT4-fs (loop4): inodes count not valid: 754974848 vs 128
[ 3517.912994] nla_parse: 2 callbacks suppressed
[ 3517.913043] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3518.019118] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3518.410802] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3518.650548] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:20 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8f00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:20 executing program 0:

08:49:20 executing program 2:

08:49:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x9, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007"], 0x0, 0x0, 0x0})

08:49:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000483804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3518.814499] binder: 25798:25804 unknown command 7
[ 3518.816117] EXT4-fs (loop4): inodes count not valid: 1207959680 vs 128
[ 3518.844335] binder: 25798:25804 ioctl c0306201 20000680 returned -22
08:49:21 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8f00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:21 executing program 0:

08:49:21 executing program 2:

08:49:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000004c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x9, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="046304400000000007"], 0x0, 0x0, 0x0})

[ 3519.073133] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:21 executing program 2:

08:49:21 executing program 0:

[ 3519.205352] binder: 25809:25815 unknown command 7
[ 3519.210371] binder: 25809:25815 ioctl c0306201 20000680 returned -22
[ 3519.337119] EXT4-fs (loop4): inodes count not valid: 1275068544 vs 128
[ 3519.766026] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3519.833407] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3520.180333] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:22 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8f01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:22 executing program 2:

08:49:22 executing program 0:

08:49:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xb, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0463044000000000076304"], 0x0, 0x0, 0x0})

08:49:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000603804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:22 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8f01, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3520.567842] binder: 25826:25831 unknown command 287495
08:49:22 executing program 0:

08:49:22 executing program 2:

[ 3520.604805] binder: 25826:25831 ioctl c0306201 20000680 returned -22
[ 3520.629707] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xb, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0463044000000000076304"], 0x0, 0x0, 0x0})

[ 3520.727419] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3520.747085] EXT4-fs (loop4): inodes count not valid: 1610612864 vs 128
08:49:22 executing program 0:

08:49:23 executing program 2:

08:49:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000683804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3520.874480] binder: 25839:25840 unknown command 287495
[ 3520.898338] binder: 25839:25840 ioctl c0306201 20000680 returned -22
[ 3521.152541] EXT4-fs (loop4): inodes count not valid: 1744830592 vs 128
08:49:24 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:24 executing program 0:

08:49:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xb, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0463044000000000076304"], 0x0, 0x0, 0x0})

08:49:24 executing program 2:

08:49:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000006c3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:24 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:24 executing program 2:

[ 3522.417007] binder: 25852:25857 unknown command 287495
[ 3522.422526] binder: 25852:25857 ioctl c0306201 20000680 returned -22
08:49:24 executing program 5:

08:49:24 executing program 0:

[ 3522.490815] EXT4-fs (loop4): inodes count not valid: 1811939456 vs 128
08:49:24 executing program 2:

08:49:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000743804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:24 executing program 5:

[ 3522.902548] EXT4-fs (loop4): inodes count not valid: 1946157184 vs 128
[ 3523.343192] nla_parse: 4 callbacks suppressed
[ 3523.343206] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3523.447793] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3523.637542] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3523.833474] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:26 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9001, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:26 executing program 0:

08:49:26 executing program 2:

08:49:26 executing program 5:

08:49:26 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000007a3804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:26 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9001, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:26 executing program 0:

08:49:26 executing program 2:

08:49:26 executing program 5:

[ 3524.142673] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3524.217734] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3524.257586] EXT4-fs (loop4): inodes count not valid: 2046820480 vs 128
08:49:26 executing program 2:

08:49:26 executing program 0:

08:49:26 executing program 5:

[ 3524.980546] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3525.017654] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3525.189434] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3525.454106] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:27 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:27 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000e53804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:27 executing program 2:

08:49:27 executing program 0:

08:49:27 executing program 5:

08:49:27 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9100, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:27 executing program 2:

[ 3525.746146] EXT4-fs (loop4): inodes count not valid: 3841982592 vs 128
08:49:27 executing program 0:

08:49:27 executing program 5:

08:49:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)

08:49:28 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000040)={0x1f, 0x7c, 0x10000})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001840)={0x53, 0x0, 0xb, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001740)="27d16347a54151f1908ef3", 0x0, 0x8c, 0x31, 0x2, 0x0})
unshare(0x40000000)

08:49:28 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x4008972, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
connect$inet(r0, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10)

08:49:29 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000006504000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:29 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]})
r0 = epoll_create1(0x0)
ioctl$VT_GETSTATE(r0, 0x5603, 0x0)

08:49:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0)

08:49:29 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0xb)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x6, 0x200}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000140), 0x27b)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

08:49:29 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9101, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3527.512218] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3527.555550] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3527.583854] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:49:29 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)

[ 3527.630481] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3527.667759] EXT4-fs (loop4): get root inode failed
08:49:29 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
io_setup(0x0, 0x0)

08:49:29 executing program 5:
mknod(&(0x7f0000000200)='./bus\x00', 0x100b, 0x0)
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x800, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x5, 0x0)

[ 3527.700822] EXT4-fs (loop4): mount failed
08:49:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x1c0c)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, 0x0, 0x0)
ptrace(0x10, r2)
fcntl$setstatus(r1, 0x4, 0x26fc)

08:49:30 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000001040)='net/if_inet6\x00')
read$FUSE(r0, 0x0, 0x9a)
read$FUSE(r0, &(0x7f0000000000), 0x1000)

[ 3527.972590] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3527.995765] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3528.004985] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3528.094989] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3528.141857] EXT4-fs (loop4): get root inode failed
[ 3528.172830] EXT4-fs (loop4): mount failed
[ 3528.498812] nla_parse: 6 callbacks suppressed
[ 3528.498825] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3528.713164] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3528.964880] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3529.233665] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:31 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)

08:49:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000a04000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
dup2(r1, r3)
tkill(r2, 0x1000000000016)

08:49:31 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9200, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3529.598392] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:31 executing program 5:
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

[ 3529.653562] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000
08:49:31 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 3529.713660] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3529.741422] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3529.751070] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 3529.751113] CPU: 1 PID: 26377 Comm: syz-executor.3 Not tainted 4.19.34 #2
[ 3529.751122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3529.751137] Call Trace:
[ 3529.751166]  dump_stack+0x172/0x1f0
[ 3529.751193]  dump_header+0x15e/0x929
[ 3529.751214]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3529.751232]  ? ___ratelimit+0x60/0x595
[ 3529.751249]  ? do_raw_spin_unlock+0x57/0x270
[ 3529.751268]  oom_kill_process.cold+0x10/0x6f5
[ 3529.751288]  ? task_will_free_mem+0x139/0x6e0
[ 3529.751304]  ? find_held_lock+0x35/0x130
[ 3529.751326]  out_of_memory+0x936/0x12d0
[ 3529.751344]  ? lock_downgrade+0x810/0x810
[ 3529.751363]  ? oom_killer_disable+0x280/0x280
[ 3529.751377]  ? find_held_lock+0x35/0x130
[ 3529.751404]  mem_cgroup_out_of_memory+0x1d2/0x240
[ 3529.751418]  ? memcg_event_wake+0x230/0x230
[ 3529.751439]  ? do_raw_spin_unlock+0x57/0x270
[ 3529.751453]  ? _raw_spin_unlock+0x2d/0x50
[ 3529.751472]  try_charge+0x1028/0x15b0
[ 3529.751485]  ? find_held_lock+0x35/0x130
[ 3529.751509]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 3529.751524]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3529.751540]  ? find_held_lock+0x35/0x130
[ 3529.751557]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[ 3529.751585]  memcg_kmem_charge_memcg+0x7c/0x130
[ 3529.751607]  ? memcg_kmem_put_cache+0xb0/0xb0
[ 3529.769480] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3529.773320]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[ 3529.773344]  memcg_kmem_charge+0x136/0x300
[ 3529.773365]  __alloc_pages_nodemask+0x3c6/0x760
[ 3529.773384]  ? __alloc_pages_slowpath+0x2870/0x2870
[ 3529.773407]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3529.773426]  ? trace_hardirqs_on+0x67/0x230
[ 3529.773440]  ? kasan_check_read+0x11/0x20
[ 3529.773464]  copy_process.part.0+0x3e0/0x7970
[ 3529.773497]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 3529.930219]  ? delayacct_end+0x5c/0x100
[ 3529.934303]  ? __delayacct_freepages_end+0xe0/0x140
[ 3529.939348]  ? __lock_acquire+0x6eb/0x48f0
[ 3529.943696]  ? __cleanup_sighand+0x70/0x70
[ 3529.947953]  ? mark_held_locks+0x100/0x100
[ 3529.952228]  _do_fork+0x257/0xfe0
[ 3529.955699]  ? fork_idle+0x1d0/0x1d0
[ 3529.959439]  ? blkcg_print_stat+0xb90/0xb90
[ 3529.963786]  ? kasan_check_read+0x11/0x20
[ 3529.967963]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3529.972748]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3529.977706]  ? do_syscall_64+0x26/0x610
[ 3529.981708]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3529.987099]  ? do_syscall_64+0x26/0x610
[ 3529.991121]  __x64_sys_clone+0xbf/0x150
[ 3529.995151]  do_syscall_64+0x103/0x610
[ 3529.999081]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3530.004297] RIP: 0033:0x45b5f9
[ 3530.007512] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 3530.026432] RSP: 002b:00007fff4a8c69e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 3530.034182] RAX: ffffffffffffffda RBX: 00007f9926b11700 RCX: 000000000045b5f9
[ 3530.041481] RDX: 00007f9926b119d0 RSI: 00007f9926b10db0 RDI: 00000000003d0f00
[ 3530.048776] RBP: 00007fff4a8c6bf0 R08: 00007f9926b11700 R09: 00007f9926b11700
[ 3530.056069] R10: 00007f9926b119d0 R11: 0000000000000202 R12: 0000000000000000
[ 3530.063366] R13: 00007fff4a8c6a9f R14: 00007f9926b119c0 R15: 000000000073bfac
[ 3530.073868] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3530.109430] Task in /syz3 killed as a result of limit of /syz3
[ 3530.111634] EXT4-fs (loop4): get root inode failed
[ 3530.121023] EXT4-fs (loop4): mount failed
[ 3530.151779] memory: usage 307200kB, limit 307200kB, failcnt 4048
[ 3530.181615] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 3530.223499] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
08:49:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000006504000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3530.269589] Memory cgroup stats for /syz3: cache:56KB rss:154928KB rss_huge:143360KB shmem:4KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:155092KB inactive_file:0KB active_file:0KB unevictable:0KB
[ 3530.433035] Memory cgroup out of memory: Kill process 20132 (syz-executor.3) score 1110 or sacrifice child
[ 3530.450945] Killed process 20132 (syz-executor.3) total-vm:72452kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB
[ 3530.477664] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3530.512197] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3530.553252] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:49:32 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 3530.615896] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3530.656381] EXT4-fs (loop4): get root inode failed
[ 3530.672764] EXT4-fs (loop4): mount failed
08:49:32 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x20)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00')
ioctl$RTC_PIE_OFF(r0, 0x7006)
rt_tgsigqueueinfo(0x0, 0x0, 0x13, 0x0)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000))

08:49:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58)

08:49:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000000060000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3531.043094] EXT4-fs (loop4): inodes count not valid: 128 vs 256
[ 3531.151080] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3531.178435] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3531.205970] xprt_adjust_timeout: rq_timeout = 0!
[ 3531.401620] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:34 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:34 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

08:49:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003802000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:34 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9201, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007f4812fe01b2a4a280930a060a0000a84306910000000b000f0035000c00060000001900154002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

08:49:34 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x20)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00')
ioctl$RTC_PIE_OFF(r0, 0x7006)
rt_tgsigqueueinfo(0x0, 0x0, 0x13, 0x0)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000))

[ 3531.940630] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[ 3531.967827] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3532.011886] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[ 3532.063601] IPv6: NLM_F_CREATE should be specified when creating new route
[ 3532.087731] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3532.108010] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3532.121369] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3532.131591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3532.138927] IPv6: NLM_F_CREATE should be set when creating new route
[ 3532.145538] IPv6: NLM_F_CREATE should be set when creating new route
[ 3532.152082] IPv6: NLM_F_CREATE should be set when creating new route
[ 3532.159855] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3532.192482] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3532.249263] EXT4-fs (loop4): get root inode failed
[ 3532.281706] EXT4-fs (loop4): mount failed
08:49:34 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003803000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:34 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 3532.437016] xprt_adjust_timeout: rq_timeout = 0!
08:49:34 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x20)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00')
ioctl$RTC_PIE_OFF(r0, 0x7006)
rt_tgsigqueueinfo(0x0, 0x0, 0x13, 0x0)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000))

08:49:34 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

[ 3532.717180] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3532.727151] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3532.743329] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3532.817917] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3532.864171] EXT4-fs (loop4): get root inode failed
[ 3532.884381] EXT4-fs (loop4): mount failed
08:49:35 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

08:49:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003805000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3533.107153] xprt_adjust_timeout: rq_timeout = 0!
[ 3533.141407] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3533.177066] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3533.215652] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3533.256327] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3533.286211] EXT4-fs (loop4): get root inode failed
[ 3533.291328] EXT4-fs (loop4): mount failed
[ 3533.639249] nla_parse: 2 callbacks suppressed
[ 3533.639265] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:35 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:35 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x20)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00')
ioctl$RTC_PIE_OFF(r0, 0x7006)
rt_tgsigqueueinfo(0x0, 0x0, 0x13, 0x0)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000))

08:49:35 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

[ 3533.808525] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3534.149941] xprt_adjust_timeout: rq_timeout = 0!
[ 3534.207499] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:36 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9300, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:36 executing program 2:
write(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x1, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="7d3910da6f8f17188802d437a66e39b5", 0x10)
dup2(0xffffffffffffffff, r0)
socket(0x11, 0x0, 0x0)

08:49:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003806000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:36 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 3534.351454] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3534.372461] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3534.389837] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:49:36 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x40101)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80})

08:49:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = getpgrp(0xffffffffffffffff)
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000))
kcmp(r3, r2, 0x0, r1, r1)

[ 3534.423238] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3534.451767] EXT4-fs (loop4): get root inode failed
[ 3534.491777] EXT4-fs (loop4): mount failed
08:49:36 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

08:49:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003807000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:36 executing program 5:
r0 = socket(0x1, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
semget(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

[ 3534.801767] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3534.847952] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3534.894249] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3534.917907] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3534.931600] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3534.960593] EXT4-fs (loop4): get root inode failed
[ 3534.974285] EXT4-fs (loop4): mount failed
[ 3535.013471] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:37 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:37 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x42, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00pI\x00', 0x8}, 0xfffffffffffffe0d)
ioctl(r0, 0x8916, &(0x7f0000000000))

08:49:37 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 3535.193660] Unknown ioctl 21559
[ 3535.409065] Unknown ioctl 21559
[ 3535.446502] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3536.055178] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3536.342613] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:38 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9301, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:38 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003808000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:38 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg(r0, 0x0, 0x0)

08:49:38 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

08:49:38 executing program 5:
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0)

[ 3536.544059] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3536.589836] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:49:38 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

[ 3536.633091] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3536.725257] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
08:49:38 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00602000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

[ 3536.768689] EXT4-fs (loop4): get root inode failed
[ 3536.781973] EXT4-fs (loop4): mount failed
08:49:38 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:39 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

[ 3536.890404] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3537.083194] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="80000000380a000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:39 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mlockall(0x2)

08:49:39 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3537.255238] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3537.290696] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3537.323007] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3537.343373] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3537.362230] EXT4-fs (loop4): get root inode failed
[ 3537.377938] EXT4-fs (loop4): mount failed
08:49:40 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9400, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:40 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:40 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

08:49:40 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003810000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:40 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000023c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})

[ 3538.720532] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3538.757258] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
08:49:40 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:40 executing program 2:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x48c01, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
recvfrom(r0, &(0x7f0000000080)=""/21, 0x15, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7})
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)

[ 3538.811259] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 3538.885082] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3538.922617] EXT4-fs (loop4): get root inode failed
[ 3538.959541] EXT4-fs (loop4): mount failed
08:49:41 executing program 2:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x48c01, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
recvfrom(r0, &(0x7f0000000080)=""/21, 0x15, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7})
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)

08:49:41 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:41 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

08:49:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003812000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

[ 3539.044296] nla_parse: 3 callbacks suppressed
[ 3539.044344] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3539.291161] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3539.360471] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3539.390823] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3539.412249] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:49:41 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3539.458103] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3539.481876] EXT4-fs (loop4): get root inode failed
[ 3539.492676] EXT4-fs (loop4): mount failed
[ 3539.833330] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3540.443239] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3540.724240] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:42 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9401, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:42 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
tkill(r1, 0x1000000000016)

08:49:42 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

08:49:42 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003814000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:43 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

[ 3540.913664] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 3540.996700] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 3541.025134] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
08:49:43 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

[ 3541.073405] EXT4-fs error (device loop4): ext4_fill_super:4355: inode #2: comm syz-executor.4: iget: root inode unallocated
[ 3541.104462] EXT4-fs (loop4): get root inode failed
[ 3541.122406] EXT4-fs (loop4): mount failed
08:49:43 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

[ 3541.195215] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003865000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:43 executing program 2:
clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000008, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x32)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x30})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

08:49:43 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

[ 3541.453386] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3541.481709] EXT4-fs (loop4): bad geometry: block count 25912 exceeds size of device (24576 blocks)
08:49:43 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

[ 3541.896231] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3542.624291] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
08:49:45 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x800)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000440)=0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0)

08:49:45 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffe77)
unlink(&(0x7f0000000240)='./file0\x00')
clone(0x6100001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x35}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10)

08:49:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="8000000038fc000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 3542.892763] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'.
08:49:45 executing program 5:
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

[ 3543.026964] EXT4-fs (loop4): bad geometry: block count 64568 exceeds size of device (24576 blocks)
08:49:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000003804010019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x3, 0x0)

08:49:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x5, 0x10, 0x1, 0xffffffffffffff9c})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

08:49:45 executing program 5:
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

[ 3543.286461] EXT4-fs (loop4): bad geometry: block count 66616 exceeds size of device (24576 blocks)
08:49:45 executing program 5:
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x74}, 0xb)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}}], 0x2, 0x2100, 0x0)

08:49:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000004080501ff0080fffdffff010a0000000c000300880000007d0a00010c0002000002fa17711104a6"], 0x2c}}, 0x0)

[ 3543.484258] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 3543.530363] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3543.586384] kasan: CONFIG_KASAN_INLINE enabled
[ 3543.591718] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 3543.599476] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 3543.605732] CPU: 0 PID: 27072 Comm: syz-executor.2 Not tainted 4.19.34 #2
[ 3543.612667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3543.613207] kobject: 'net' (0000000053a1fa91): kobject_add_internal: parent: 'hwsim3045', set: '(null)'
[ 3543.622252] RIP: 0010:udp_timeout_obj_to_nlattr+0x77/0x1a0
[ 3543.622268] Code: 96 85 c7 00 f1 f1 f1 f1 c7 40 04 04 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 30 9a d4 fb 48 89 d8 48 c1 e8 03 <42> 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 3543.622274] RSP: 0018:ffff88802969f3d0 EFLAGS: 00010246
[ 3543.622286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8599425b
[ 3543.622293] RDX: 0000000000000000 RSI: ffffffff85969d10 RDI: ffff888059b39280
[ 3543.622301] RBP: ffff88802969f460 R08: ffff88809593e6c0 R09: ffff88800ea2a668
[ 3543.622308] R10: ffffed1001d454cc R11: ffff88800ea2a660 R12: 1ffff110052d3e7b
[ 3543.622315] R13: ffff888059b39280 R14: ffff88802969f438 R15: dffffc0000000000
[ 3543.622325] FS:  00007f367f3bb700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 3543.622333] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3543.622340] CR2: 00000000004e6460 CR3: 00000000812fe000 CR4: 00000000001406f0
[ 3543.622351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3543.622358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3543.622362] Call Trace:
[ 3543.622385]  ? memcpy+0x46/0x50
[ 3543.637160] kobject: 'loop5' (0000000072b3318f): kobject_uevent_env
[ 3543.637563]  ? udp_timeout_nlattr_to_obj+0x240/0x240
[ 3543.637581]  ? __nla_put+0x37/0x40
[ 3543.637597]  ? nla_put+0x116/0x150
[ 3543.659682] kobject: 'wlan1440' (000000005d9ea7cb): kobject_add_internal: parent: 'net', set: 'devices'
[ 3543.661980]  cttimeout_default_get+0x69a/0xa80
[ 3543.662002]  ? cttimeout_del_timeout+0x1a0/0x1a0
[ 3543.670135] kobject: 'loop5' (0000000072b3318f): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3543.676583]  ? __lock_is_held+0xf8/0x140
[ 3543.676605]  ? cttimeout_del_timeout+0x1a0/0x1a0
[ 3543.676619]  nfnetlink_rcv_msg+0xd12/0xfe0
[ 3543.676637]  ? nfnetlink_bind+0x2d0/0x2d0
[ 3543.676653]  ? avc_has_extended_perms+0x10f0/0x10f0
[ 3543.676670]  ? __dev_queue_xmit+0x1764/0x3020
[ 3543.676689]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3543.676702]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3543.676717]  ? cred_has_capability+0x193/0x320
[ 3543.676731]  ? selinux_ipv4_output+0x50/0x50
[ 3543.676748]  ? __sanitizer_cov_trace_cmp1+0x3/0x20
[ 3543.676770]  netlink_rcv_skb+0x180/0x460
[ 3543.688518] kobject: 'wlan1440' (000000005d9ea7cb): kobject_uevent_env
[ 3543.691382]  ? nfnetlink_bind+0x2d0/0x2d0
[ 3543.691412]  ? netlink_ack+0xb60/0xb60
[ 3543.712132] kobject: 'wlan1440' (000000005d9ea7cb): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim3045/net/wlan1440'
[ 3543.712852]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3543.733626] kobject: 'queues' (000000009e11c31e): kobject_add_internal: parent: 'wlan1440', set: '<NULL>'
[ 3543.734734]  ? ns_capable+0x23/0x30
[ 3543.734758]  ? __netlink_ns_capable+0x104/0x140
[ 3543.743094] kobject: 'queues' (000000009e11c31e): kobject_uevent_env
[ 3543.747129]  nfnetlink_rcv+0x1c0/0x460
[ 3543.747153]  ? nfnetlink_rcv_batch+0x1770/0x1770
[ 3543.747167]  ? netlink_deliver_tap+0x254/0xc20
[ 3543.747183]  netlink_unicast+0x53c/0x720
[ 3543.747198]  ? netlink_attachskb+0x770/0x770
[ 3543.747217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3543.747231]  netlink_sendmsg+0x8ae/0xd70
[ 3543.747247]  ? netlink_unicast+0x720/0x720
[ 3543.747266]  ? selinux_socket_sendmsg+0x36/0x40
[ 3543.747288]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3543.759818] kobject: 'queues' (000000009e11c31e): kobject_uevent_env: filter function caused the event to drop!
[ 3543.769162]  ? security_socket_sendmsg+0x93/0xc0
[ 3543.769191]  ? netlink_unicast+0x720/0x720
[ 3543.769208]  sock_sendmsg+0xdd/0x130
[ 3543.769226]  ___sys_sendmsg+0x806/0x930
[ 3543.769246]  ? copy_msghdr_from_user+0x430/0x430
[ 3543.769272]  ? lock_downgrade+0x810/0x810
[ 3543.769287]  ? kasan_check_read+0x11/0x20
[ 3543.769325]  ? __fget+0x367/0x540
[ 3543.769354]  ? iterate_fd+0x360/0x360
[ 3543.788643] kobject: 'rx-0' (00000000d92835d6): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3543.792239]  ? lock_downgrade+0x810/0x810
[ 3543.792259]  ? __fget_light+0x1a9/0x230
[ 3543.792273]  ? __fdget+0x1b/0x20
[ 3543.792290]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 3543.792312]  __sys_sendmsg+0x105/0x1d0
[ 3543.810876] kobject: 'rx-0' (00000000d92835d6): kobject_uevent_env
[ 3543.814965]  ? __ia32_sys_shutdown+0x80/0x80
[ 3543.814990]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3543.815004]  ? do_syscall_64+0x26/0x610
[ 3543.815027]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3543.834095] kobject: 'rx-0' (00000000d92835d6): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim3045/net/wlan1440/queues/rx-0'
[ 3543.835089]  ? do_syscall_64+0x26/0x610
[ 3543.835110]  __x64_sys_sendmsg+0x78/0xb0
[ 3543.835125]  do_syscall_64+0x103/0x610
[ 3543.835156]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3543.850994] kobject: 'tx-0' (00000000ca23b385): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3543.854979] RIP: 0033:0x458c29
[ 3543.854997] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3543.855003] RSP: 002b:00007f367f3bac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3543.855016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[ 3543.855031] RDX: 0000000000000000 RSI: 0000000020dddfc8 RDI: 0000000000000004
[ 3543.872297] kobject: 'tx-0' (00000000ca23b385): kobject_uevent_env
[ 3543.876451] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 3543.876459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f367f3bb6d4
[ 3543.876466] R13: 00000000004c6501 R14: 00000000004dae68 R15: 00000000ffffffff
[ 3543.876483] Modules linked in:
[ 3543.895534] ---[ end trace 2f371962d6959aaf ]---
[ 3543.907301] kobject: 'tx-0' (00000000ca23b385): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim3045/net/wlan1440/queues/tx-0'
[ 3543.935494] RIP: 0010:udp_timeout_obj_to_nlattr+0x77/0x1a0
[ 3543.940523] kobject: 'tx-1' (0000000036923ad5): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3543.942032] Code: 96 85 c7 00 f1 f1 f1 f1 c7 40 04 04 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 30 9a d4 fb 48 89 d8 48 c1 e8 03 <42> 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 3543.942040] RSP: 0018:ffff88802969f3d0 EFLAGS: 00010246
[ 3543.942053] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8599425b
[ 3543.942061] RDX: 0000000000000000 RSI: ffffffff85969d10 RDI: ffff888059b39280
[ 3543.942070] RBP: ffff88802969f460 R08: ffff88809593e6c0 R09: ffff88800ea2a668
[ 3543.942085] R10: ffffed1001d454cc R11: ffff88800ea2a660 R12: 1ffff110052d3e7b
[ 3543.948442] kobject: 'tx-1' (0000000036923ad5): kobject_uevent_env
[ 3544.005552] R13: ffff888059b39280 R14: ffff88802969f438 R15: dffffc0000000000
[ 3544.009646] kobject: 'tx-1' (0000000036923ad5): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim3045/net/wlan1440/queues/tx-1'
[ 3544.010473] FS:  00007f367f3bb700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 3544.014644] kobject: 'tx-2' (00000000c5866c9e): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3544.035529] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3544.050698] kobject: 'tx-2' (00000000c5866c9e): kobject_uevent_env
[ 3544.065523] CR2: 00007f9926acedb8 CR3: 00000000812fe000 CR4: 00000000001406f0
[ 3544.072064] kobject: 'tx-2' (00000000c5866c9e): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim3045/net/wlan1440/queues/tx-2'
[ 3544.073338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3544.077825] kobject: 'tx-3' (00000000bc93a7f2): kobject_add_internal: parent: 'queues', set: 'queues'
[ 3544.095523] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3544.118947] kobject: 'tx-3' (00000000bc93a7f2): kobject_uevent_env
[ 3544.155796] Kernel panic - not syncing: Fatal exception
[ 3544.162341] kobject: 'tx-3' (00000000bc93a7f2): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim3045/net/wlan1440/queues/tx-3'
[ 3544.169504] Kernel Offset: disabled
[ 3544.382879] Rebooting in 86400 seconds..