0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000600000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000026000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000002000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000f9fdffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1664.470664][T14885] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.478712][T14885] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1664.490268][T14885] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.498256][T14885] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1664.586159][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.594179][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1664.611006][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.619018][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1664.630522][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.638529][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1664.677925][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.685897][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1664.697360][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.705344][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500052f000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1664.738823][T14947] loop2: detected capacity change from 0 to 2048 [ 1664.747023][T14948] loop3: detected capacity change from 0 to 2048 [ 1664.749832][T14947] EXT4-fs (loop2): bad geometry: first data block 1536 is beyond end of filesystem (512) [ 1664.764996][T14953] loop5: detected capacity change from 0 to 2048 [ 1664.774103][T14953] EXT4-fs (loop5): bad geometry: first data block 131072 is beyond end of filesystem (512) [ 1664.774582][T14948] EXT4-fs (loop3): bad geometry: first data block 4294966777 is beyond end of filesystem (512) [ 1664.828990][T14947] loop2: detected capacity change from 0 to 2048 [ 1664.835593][T14948] loop3: detected capacity change from 0 to 2048 [ 1664.842228][T14953] loop5: detected capacity change from 0 to 2048 [ 1664.847493][T14947] EXT4-fs (loop2): bad geometry: first data block 1536 is beyond end of filesystem (512) [ 1664.859193][T14948] EXT4-fs (loop3): bad geometry: first data block 4294966777 is beyond end of filesystem (512) [ 1664.869772][T14953] EXT4-fs (loop5): bad geometry: first data block 131072 is beyond end of filesystem (512) [ 1664.877888][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000700000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1664.887779][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1664.904413][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.912427][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:15:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000ffff03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fdfdffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1664.934211][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.942288][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:32 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x0, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) [ 1664.981078][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1664.989067][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1665.000883][T14929] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.008961][T14929] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500003f000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1665.052049][T14970] loop2: detected capacity change from 0 to 2048 [ 1665.070624][T14977] loop5: detected capacity change from 0 to 2048 [ 1665.078452][T14977] EXT4-fs (loop5): bad geometry: first data block 262143 is beyond end of filesystem (512) [ 1665.089125][T14970] EXT4-fs (loop2): bad geometry: first data block 1792 is beyond end of filesystem (512) 02:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1665.091286][T14981] loop3: detected capacity change from 0 to 2048 [ 1665.116273][T14981] EXT4-fs (loop3): bad geometry: first data block 4294966781 is beyond end of filesystem (512) [ 1665.147837][T14977] loop5: detected capacity change from 0 to 2048 [ 1665.155404][T14977] EXT4-fs (loop5): bad geometry: first data block 262143 is beyond end of filesystem (512) [ 1665.167835][T14981] loop3: detected capacity change from 0 to 2048 [ 1665.179580][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.187779][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1665.199501][T14981] EXT4-fs (loop3): bad geometry: first data block 4294966781 is beyond end of filesystem (512) [ 1665.221222][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.229261][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1665.242879][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.250866][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1665.297255][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.305230][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1665.317013][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.324985][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1665.374983][T14998] loop2: detected capacity change from 0 to 2048 [ 1665.413958][T14998] EXT4-fs (loop2): bad geometry: first data block 2048 is beyond end of filesystem (512) [ 1665.447095][T14998] loop2: detected capacity change from 0 to 2048 [ 1665.448102][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.457162][T14998] EXT4-fs (loop2): bad geometry: first data block 2048 is beyond end of filesystem (512) [ 1665.461419][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1665.493455][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.501459][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1665.512993][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.521130][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:32 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x0, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000004000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000007fffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000040000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000900000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1665.571715][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.579699][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1665.591223][T14951] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.599205][T14951] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1665.690822][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.698901][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1665.715001][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.722980][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1665.734502][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.742542][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1665.781452][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.789472][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1665.800953][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.808940][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000480000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1665.846310][T15013] loop5: detected capacity change from 0 to 2048 [ 1665.854862][T15016] loop2: detected capacity change from 0 to 2048 [ 1665.858309][T15014] loop3: detected capacity change from 0 to 2048 [ 1665.869718][T15013] EXT4-fs (loop5): bad geometry: first data block 262144 is beyond end of filesystem (512) [ 1665.880426][T15016] EXT4-fs (loop2): bad geometry: first data block 2304 is beyond end of filesystem (512) [ 1665.890837][T15014] EXT4-fs (loop3): bad geometry: first data block 4294967167 is beyond end of filesystem (512) [ 1665.917593][T15016] loop2: detected capacity change from 0 to 2048 [ 1665.927701][T15016] EXT4-fs (loop2): bad geometry: first data block 2304 is beyond end of filesystem (512) [ 1665.940984][T15014] loop3: detected capacity change from 0 to 2048 [ 1665.947987][T15013] loop5: detected capacity change from 0 to 2048 [ 1665.955638][T15014] EXT4-fs (loop3): bad geometry: first data block 4294967167 is beyond end of filesystem (512) [ 1665.958889][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1665.966716][T15013] EXT4-fs (loop5): bad geometry: first data block 262144 is beyond end of filesystem (512) [ 1665.974045][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1666.002118][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000a00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000085ffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000008000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1666.010172][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1666.030231][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.038249][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1666.081533][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.089542][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1666.101768][T14974] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.109768][T14974] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:33 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x0, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050009c0000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1666.155229][T15037] loop2: detected capacity change from 0 to 2048 [ 1666.167537][T15037] EXT4-fs (loop2): bad geometry: first data block 2560 is beyond end of filesystem (512) [ 1666.187347][T15041] loop3: detected capacity change from 0 to 2048 [ 1666.193147][T15042] loop5: detected capacity change from 0 to 2048 [ 1666.200808][T15041] EXT4-fs (loop3): bad geometry: first data block 4294967173 is beyond end of filesystem (512) [ 1666.212531][T15037] loop2: detected capacity change from 0 to 2048 [ 1666.213237][T15042] EXT4-fs (loop5): bad geometry: first data block 524288 is beyond end of filesystem (512) [ 1666.229904][T15037] EXT4-fs (loop2): bad geometry: first data block 2560 is beyond end of filesystem (512) 02:15:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000b00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1666.258886][T15041] loop3: detected capacity change from 0 to 2048 [ 1666.266004][T15041] EXT4-fs (loop3): bad geometry: first data block 4294967173 is beyond end of filesystem (512) [ 1666.278867][T15042] loop5: detected capacity change from 0 to 2048 [ 1666.281424][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.289727][T15042] EXT4-fs (loop5): bad geometry: first data block 524288 is beyond end of filesystem (512) [ 1666.293192][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1666.319428][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.327440][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1666.339566][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.347685][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1666.387053][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.395037][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1666.406506][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.414496][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1666.449674][T15057] loop2: detected capacity change from 0 to 2048 [ 1666.477159][T15057] EXT4-fs (loop2): bad geometry: first data block 2816 is beyond end of filesystem (512) [ 1666.552583][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.560597][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1666.576557][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.584541][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1666.596140][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.604160][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:33 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x0, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000400008000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500fffe000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000008cffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1666.643204][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.651190][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1666.662583][T15012] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.670642][T15012] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1666.768393][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.776377][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1666.793056][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.801038][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1666.812425][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.820404][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1666.858457][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.866619][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1666.878128][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1666.886167][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500feff000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1666.923034][T15075] loop3: detected capacity change from 0 to 2048 [ 1666.929880][T15076] loop5: detected capacity change from 0 to 2048 [ 1666.938758][T15079] loop2: detected capacity change from 0 to 2048 [ 1666.949454][T15076] EXT4-fs (loop5): bad geometry: first data block 524352 is beyond end of filesystem (512) [ 1666.960139][T15075] EXT4-fs (loop3): bad geometry: first data block 4294967180 is beyond end of filesystem (512) [ 1666.973666][T15079] EXT4-fs (loop2): bad geometry: first data block 3072 is beyond end of filesystem (512) [ 1667.002264][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.010238][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1667.028383][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.028779][T15079] loop2: detected capacity change from 0 to 2048 [ 1667.036355][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1667.043194][T15076] loop5: detected capacity change from 0 to 2048 [ 1667.055197][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.060759][T15075] loop3: detected capacity change from 0 to 2048 [ 1667.068290][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1667.086646][T15076] EXT4-fs (loop5): bad geometry: first data block 524352 is beyond end of filesystem (512) [ 1667.096986][T15075] EXT4-fs (loop3): bad geometry: first data block 4294967180 is beyond end of filesystem (512) [ 1667.108027][T15079] EXT4-fs (loop2): bad geometry: first data block 3072 is beyond end of filesystem (512) 02:15:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000c000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000097ffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000d00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1667.129280][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.137271][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1667.157380][T15058] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.165360][T15058] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:34 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x0, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000080004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1667.225771][T15102] loop3: detected capacity change from 0 to 2048 [ 1667.235736][T15100] loop5: detected capacity change from 0 to 2048 [ 1667.242936][T15102] EXT4-fs (loop3): bad geometry: first data block 4294967191 is beyond end of filesystem (512) [ 1667.253789][T15100] EXT4-fs (loop5): bad geometry: first data block 786432 is beyond end of filesystem (512) [ 1667.253937][T15105] loop2: detected capacity change from 0 to 2048 [ 1667.272359][T15105] EXT4-fs (loop2): bad geometry: first data block 3328 is beyond end of filesystem (512) [ 1667.305414][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.313409][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1667.330825][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.338820][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1667.352142][T15100] loop5: detected capacity change from 0 to 2048 [ 1667.352157][T15102] loop3: detected capacity change from 0 to 2048 [ 1667.359088][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000daffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1667.372810][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1667.373062][T15102] EXT4-fs (loop3): bad geometry: first data block 4294967191 is beyond end of filesystem (512) [ 1667.385804][T15105] loop2: detected capacity change from 0 to 2048 [ 1667.400965][T15100] EXT4-fs (loop5): bad geometry: first data block 786432 is beyond end of filesystem (512) [ 1667.411362][T15105] EXT4-fs (loop2): bad geometry: first data block 3328 is beyond end of filesystem (512) [ 1667.442752][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.450727][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1667.462727][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.470721][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1667.551734][T15125] loop3: detected capacity change from 0 to 2048 [ 1667.571949][T15125] EXT4-fs (loop3): bad geometry: first data block 4294967258 is beyond end of filesystem (512) [ 1667.638193][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.646239][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1667.663141][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.671141][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1667.682937][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.690914][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:35 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x0, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000018000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005004000080004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000e00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000e2ffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1667.730117][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.738104][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1667.749590][T15072] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.757571][T15072] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1667.850511][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.858738][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1667.875451][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.883500][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1667.895058][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.903062][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1667.941435][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.949493][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1667.960961][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1667.968981][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000200004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1668.000485][T15137] loop5: detected capacity change from 0 to 2048 [ 1668.009364][T15137] EXT4-fs (loop5): bad geometry: first data block 1572864 is beyond end of filesystem (512) [ 1668.020339][T15141] loop2: detected capacity change from 0 to 2048 [ 1668.029486][T15141] EXT4-fs (loop2): bad geometry: first data block 3584 is beyond end of filesystem (512) [ 1668.033207][T15144] loop3: detected capacity change from 0 to 2048 [ 1668.047742][T15144] EXT4-fs (loop3): bad geometry: first data block 4294967266 is beyond end of filesystem (512) [ 1668.059812][T15137] loop5: detected capacity change from 0 to 2048 [ 1668.067893][T15137] EXT4-fs (loop5): bad geometry: first data block 1572864 is beyond end of filesystem (512) [ 1668.079123][T15141] loop2: detected capacity change from 0 to 2048 [ 1668.086153][T15141] EXT4-fs (loop2): bad geometry: first data block 3584 is beyond end of filesystem (512) 02:15:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000010100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000f00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1668.097565][T15144] loop3: detected capacity change from 0 to 2048 [ 1668.104783][T15144] EXT4-fs (loop3): bad geometry: first data block 4294967266 is beyond end of filesystem (512) [ 1668.106171][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.123109][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000f4ffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1668.147863][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.155897][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1668.167516][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.175526][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1668.214366][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.222351][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1668.233778][T15121] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.241858][T15121] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:35 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000104000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1668.309095][T15168] loop5: detected capacity change from 0 to 2048 [ 1668.313405][T15169] loop2: detected capacity change from 0 to 2048 [ 1668.319692][T15167] loop3: detected capacity change from 0 to 2048 [ 1668.332479][T15168] EXT4-fs (loop5): bad geometry: first data block 16777216 is beyond end of filesystem (512) [ 1668.345433][T15169] EXT4-fs (loop2): bad geometry: first data block 3840 is beyond end of filesystem (512) 02:15:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000f5ffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1668.366793][T15167] EXT4-fs (loop3): bad geometry: first data block 4294967284 is beyond end of filesystem (512) [ 1668.388865][T15168] loop5: detected capacity change from 0 to 2048 [ 1668.397083][T15168] EXT4-fs (loop5): bad geometry: first data block 16777216 is beyond end of filesystem (512) [ 1668.427516][T15169] loop2: detected capacity change from 0 to 2048 [ 1668.445529][T15169] EXT4-fs (loop2): bad geometry: first data block 3840 is beyond end of filesystem (512) [ 1668.472980][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.480968][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1668.498268][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.506227][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1668.517983][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.526031][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1668.564359][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.572383][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1668.583797][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.591782][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1668.640905][T15190] loop3: detected capacity change from 0 to 2048 [ 1668.649421][T15190] EXT4-fs (loop3): bad geometry: first data block 4294967285 is beyond end of filesystem (512) [ 1668.696208][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.704248][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1668.720758][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.728740][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1668.740171][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.748158][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1668.787547][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.795517][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1668.806932][T15132] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.814893][T15132] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:36 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x0, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000204000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000f6ffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1668.837600][T15190] loop3: detected capacity change from 0 to 2048 [ 1668.856835][T15190] EXT4-fs (loop3): bad geometry: first data block 4294967285 is beyond end of filesystem (512) [ 1668.934996][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.942980][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1668.959469][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.967442][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1668.978921][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1668.986900][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1669.025014][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000040204000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1669.032984][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1669.044515][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.052491][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1669.093407][T15208] loop5: detected capacity change from 0 to 2048 [ 1669.108639][T15209] loop2: detected capacity change from 0 to 2048 [ 1669.118569][T15210] loop3: detected capacity change from 0 to 2048 [ 1669.125269][T15208] EXT4-fs (loop5): bad geometry: first data block 33554432 is beyond end of filesystem (512) [ 1669.139786][T15209] EXT4-fs (loop2): bad geometry: first data block 4096 is beyond end of filesystem (512) [ 1669.150492][T15210] EXT4-fs (loop3): bad geometry: first data block 4294967286 is beyond end of filesystem (512) [ 1669.177919][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.185887][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1669.202467][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.210451][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1669.222068][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.227815][T15208] loop5: detected capacity change from 0 to 2048 [ 1669.230114][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1669.237174][T15208] EXT4-fs (loop5): bad geometry: first data block 33554432 is beyond end of filesystem (512) [ 1669.258300][T15209] loop2: detected capacity change from 0 to 2048 [ 1669.265035][T15210] loop3: detected capacity change from 0 to 2048 [ 1669.273078][T15210] EXT4-fs (loop3): bad geometry: first data block 4294967286 is beyond end of filesystem (512) [ 1669.283861][T15209] EXT4-fs (loop2): bad geometry: first data block 4096 is beyond end of filesystem (512) 02:15:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000004020100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fbffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001100000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1669.285850][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.301761][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1669.313274][T15184] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.321284][T15184] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:36 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000304000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1669.405710][T15233] loop5: detected capacity change from 0 to 2048 [ 1669.412754][T15234] loop3: detected capacity change from 0 to 2048 [ 1669.418016][T15236] loop2: detected capacity change from 0 to 2048 [ 1669.426679][T15233] EXT4-fs (loop5): bad geometry: first data block 33816576 is beyond end of filesystem (512) [ 1669.428294][T15234] EXT4-fs (loop3): bad geometry: first data block 4294967291 is beyond end of filesystem (512) [ 1669.447934][T15236] EXT4-fs (loop2): bad geometry: first data block 4352 is beyond end of filesystem (512) [ 1669.477445][T15233] loop5: detected capacity change from 0 to 2048 [ 1669.484595][T15233] EXT4-fs (loop5): bad geometry: first data block 33816576 is beyond end of filesystem (512) [ 1669.499761][T15236] loop2: detected capacity change from 0 to 2048 [ 1669.500540][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.507361][T15236] EXT4-fs (loop2): bad geometry: first data block 4352 is beyond end of filesystem (512) 02:15:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000030100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1669.514048][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1669.535406][T15234] loop3: detected capacity change from 0 to 2048 [ 1669.542339][T15234] EXT4-fs (loop3): bad geometry: first data block 4294967291 is beyond end of filesystem (512) [ 1669.543919][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.560669][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1669.572382][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.580375][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1669.626393][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.634353][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1669.645765][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.653741][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1669.716392][T15257] loop5: detected capacity change from 0 to 2048 [ 1669.751746][T15257] EXT4-fs (loop5): bad geometry: first data block 50331648 is beyond end of filesystem (512) [ 1669.797610][T15257] loop5: detected capacity change from 0 to 2048 [ 1669.806777][T15257] EXT4-fs (loop5): bad geometry: first data block 50331648 is beyond end of filesystem (512) [ 1669.825717][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.833692][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1669.849854][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.857828][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1669.869533][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.877523][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:37 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x0, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fdffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000404000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000040100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1669.917120][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.925081][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1669.936525][T15204] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1669.944567][T15204] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1670.046464][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.054452][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1670.071003][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.078988][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1670.090362][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.098341][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1670.136590][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.144552][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1670.155988][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.163977][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000504000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1670.212097][T15274] loop2: detected capacity change from 0 to 2048 [ 1670.216202][T15276] loop3: detected capacity change from 0 to 2048 [ 1670.219410][T15277] loop5: detected capacity change from 0 to 2048 [ 1670.236464][T15274] EXT4-fs (loop2): bad geometry: first data block 4608 is beyond end of filesystem (512) [ 1670.248186][T15276] EXT4-fs (loop3): bad geometry: first data block 4294967293 is beyond end of filesystem (512) [ 1670.248227][T15277] EXT4-fs (loop5): bad geometry: first data block 67108864 is beyond end of filesystem (512) [ 1670.287558][T15274] loop2: detected capacity change from 0 to 2048 [ 1670.294513][T15274] EXT4-fs (loop2): bad geometry: first data block 4608 is beyond end of filesystem (512) [ 1670.298132][T15276] loop3: detected capacity change from 0 to 2048 02:15:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001700000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1670.313714][T15277] loop5: detected capacity change from 0 to 2048 [ 1670.320606][T15276] EXT4-fs (loop3): bad geometry: first data block 4294967293 is beyond end of filesystem (512) [ 1670.331549][T15277] EXT4-fs (loop5): bad geometry: first data block 67108864 is beyond end of filesystem (512) [ 1670.341204][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.349686][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000050100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000feffffff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1670.375799][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.383794][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1670.397241][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.405215][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1670.452878][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.460869][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1670.472313][T15250] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.480316][T15250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:37 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000060100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1670.547992][T15302] loop5: detected capacity change from 0 to 2048 [ 1670.549852][T15297] loop2: detected capacity change from 0 to 2048 [ 1670.556821][T15303] loop3: detected capacity change from 0 to 2048 [ 1670.569463][T15302] EXT4-fs (loop5): bad geometry: first data block 83886080 is beyond end of filesystem (512) [ 1670.586531][T15297] EXT4-fs (loop2): bad geometry: first data block 5888 is beyond end of filesystem (512) [ 1670.598959][T15303] EXT4-fs (loop3): bad geometry: first data block 4294967294 is beyond end of filesystem (512) [ 1670.662322][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.662754][T15303] loop3: detected capacity change from 0 to 2048 [ 1670.670377][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1670.678376][T15303] EXT4-fs (loop3): bad geometry: first data block 4294967294 is beyond end of filesystem (512) [ 1670.695755][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.706298][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1670.718150][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.726215][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1670.769425][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.777477][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1670.789451][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.797493][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1670.838689][T15319] loop5: detected capacity change from 0 to 2048 [ 1670.851540][T15319] EXT4-fs (loop5): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 1670.897197][T15319] loop5: detected capacity change from 0 to 2048 [ 1670.904610][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.912613][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1670.916960][T15319] EXT4-fs (loop5): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 1670.929612][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.942094][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1670.953511][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1670.961491][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:38 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x0, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000040604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000004060100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1671.002645][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.010632][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1671.022009][T15268] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.030039][T15268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1671.125709][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.133698][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1671.149569][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.157565][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1671.168924][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.176961][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1671.214710][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.222690][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1671.234106][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.242086][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000704000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1671.290732][T15336] loop5: detected capacity change from 0 to 2048 [ 1671.294572][T15335] loop2: detected capacity change from 0 to 2048 [ 1671.302936][T15337] loop3: detected capacity change from 0 to 2048 [ 1671.311170][T15336] EXT4-fs (loop5): bad geometry: first data block 100925440 is beyond end of filesystem (512) [ 1671.322327][T15337] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1671.330219][T15335] EXT4-fs (loop2): bad geometry: first data block 6144 is beyond end of filesystem (512) [ 1671.376107][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.384091][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1671.400877][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.408901][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1671.421680][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.422645][T15335] loop2: detected capacity change from 0 to 2048 [ 1671.429762][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1671.447120][T15336] loop5: detected capacity change from 0 to 2048 [ 1671.454166][T15337] loop3: detected capacity change from 0 to 2048 [ 1671.461595][T15335] EXT4-fs (loop2): bad geometry: first data block 6144 is beyond end of filesystem (512) [ 1671.461875][T15336] EXT4-fs (loop5): bad geometry: first data block 100925440 is beyond end of filesystem (512) [ 1671.482550][T15337] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1671.495408][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.503416][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1671.515035][T15316] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001900000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000040000000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000070100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1671.523069][T15316] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:38 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000804000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1671.582534][T15361] loop2: detected capacity change from 0 to 2048 [ 1671.602158][T15360] loop3: detected capacity change from 0 to 2048 [ 1671.613358][T15363] loop5: detected capacity change from 0 to 2048 [ 1671.622344][T15361] EXT4-fs (loop2): bad geometry: first data block 6400 is beyond end of filesystem (512) [ 1671.632967][T15360] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1671.640378][T15363] EXT4-fs (loop5): bad geometry: first data block 117440512 is beyond end of filesystem (512) [ 1671.684281][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.692266][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1671.708914][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.716922][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1671.731372][T15361] loop2: detected capacity change from 0 to 2048 [ 1671.733358][T15363] loop5: detected capacity change from 0 to 2048 [ 1671.744586][T15361] EXT4-fs (loop2): bad geometry: first data block 6400 is beyond end of filesystem (512) [ 1671.744751][T15360] loop3: detected capacity change from 0 to 2048 [ 1671.755103][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.768801][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001a00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1671.780952][T15360] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1671.787833][T15363] EXT4-fs (loop5): bad geometry: first data block 117440512 is beyond end of filesystem (512) [ 1671.812060][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.820058][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1671.833107][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1671.841100][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1671.891818][T15384] loop2: detected capacity change from 0 to 2048 [ 1671.900976][T15384] EXT4-fs (loop2): bad geometry: first data block 6656 is beyond end of filesystem (512) [ 1672.018555][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.026563][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1672.042853][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.050857][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1672.062311][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.070368][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1672.108842][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:39 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000080100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000001804000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000400000000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001b00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1672.116829][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1672.128292][T15330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.136277][T15330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1672.228422][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.236404][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1672.252853][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.260851][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1672.272248][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.280274][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1672.318513][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.326482][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1672.337845][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.345804][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000001c04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1672.384706][T15399] loop5: detected capacity change from 0 to 2048 [ 1672.396931][T15399] EXT4-fs (loop5): bad geometry: first data block 134217728 is beyond end of filesystem (512) [ 1672.399702][T15404] loop3: detected capacity change from 0 to 2048 [ 1672.410010][T15402] loop2: detected capacity change from 0 to 2048 [ 1672.422989][T15402] EXT4-fs (loop2): bad geometry: first data block 6912 is beyond end of filesystem (512) [ 1672.433014][T15404] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1672.447133][T15399] loop5: detected capacity change from 0 to 2048 [ 1672.456009][T15399] EXT4-fs (loop5): bad geometry: first data block 134217728 is beyond end of filesystem (512) [ 1672.477274][T15402] loop2: detected capacity change from 0 to 2048 02:15:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000090100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1672.486470][T15402] EXT4-fs (loop2): bad geometry: first data block 6912 is beyond end of filesystem (512) [ 1672.497328][T15404] loop3: detected capacity change from 0 to 2048 [ 1672.504199][T15404] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1672.504303][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.518969][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1672.544333][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.552389][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1672.563955][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.571948][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000002620000000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1672.615515][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.623600][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1672.635594][T15379] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.643593][T15379] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:39 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000002604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1672.700071][T15424] loop2: detected capacity change from 0 to 2048 [ 1672.714809][T15426] loop5: detected capacity change from 0 to 2048 [ 1672.724238][T15424] EXT4-fs (loop2): bad geometry: first data block 7168 is beyond end of filesystem (512) [ 1672.739104][T15426] EXT4-fs (loop5): bad geometry: first data block 150994944 is beyond end of filesystem (512) [ 1672.743592][T15429] loop3: detected capacity change from 0 to 2048 [ 1672.757745][T15424] loop2: detected capacity change from 0 to 2048 [ 1672.766714][T15424] EXT4-fs (loop2): bad geometry: first data block 7168 is beyond end of filesystem (512) [ 1672.777140][T15429] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1672.791895][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001d00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1672.799991][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1672.813245][T15426] loop5: detected capacity change from 0 to 2048 [ 1672.820368][T15426] EXT4-fs (loop5): bad geometry: first data block 150994944 is beyond end of filesystem (512) [ 1672.831885][T15429] loop3: detected capacity change from 0 to 2048 [ 1672.833296][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.846249][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1672.856222][T15429] EXT4-fs (loop3): #clusters per group too big: 16384 [ 1672.857692][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.872272][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1672.911120][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.919155][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1672.931149][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1672.939152][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1672.989678][T15446] loop2: detected capacity change from 0 to 2048 [ 1673.000196][T15446] EXT4-fs (loop2): bad geometry: first data block 7424 is beyond end of filesystem (512) [ 1673.049347][T15446] loop2: detected capacity change from 0 to 2048 [ 1673.063195][T15446] EXT4-fs (loop2): bad geometry: first data block 7424 is beyond end of filesystem (512) [ 1673.098263][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.106264][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1673.122890][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.131013][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1673.158774][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.166768][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:40 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000052f04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000a0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001e00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1673.206741][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.214707][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1673.226186][T15394] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.234146][T15394] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1673.330541][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.338542][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1673.354626][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.362609][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1673.374013][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.381985][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1673.420607][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.428602][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1673.440117][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.448277][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000003f04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1673.491306][T15466] loop3: detected capacity change from 0 to 2048 [ 1673.497850][T15470] loop2: detected capacity change from 0 to 2048 [ 1673.504089][T15469] loop5: detected capacity change from 0 to 2048 [ 1673.510594][T15470] EXT4-fs (loop2): bad geometry: first data block 7680 is beyond end of filesystem (512) [ 1673.522324][T15466] EXT4-fs (loop3): bad geometry: first data block 512 is beyond end of filesystem (512) [ 1673.533849][T15469] EXT4-fs (loop5): bad geometry: first data block 167772160 is beyond end of filesystem (512) [ 1673.557749][T15470] loop2: detected capacity change from 0 to 2048 [ 1673.566149][T15470] EXT4-fs (loop2): bad geometry: first data block 7680 is beyond end of filesystem (512) [ 1673.577293][T15466] loop3: detected capacity change from 0 to 2048 [ 1673.577321][T15469] loop5: detected capacity change from 0 to 2048 [ 1673.591446][T15466] EXT4-fs (loop3): bad geometry: first data block 512 is beyond end of filesystem (512) [ 1673.602423][T15469] EXT4-fs (loop5): bad geometry: first data block 167772160 is beyond end of filesystem (512) [ 1673.607100][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.620797][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000300000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffff30a0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1673.637464][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.645547][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1673.668822][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.676965][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1673.717898][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.725977][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1673.737539][T15442] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1673.745501][T15442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:41 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000004004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000008004004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1673.809278][T15493] loop3: detected capacity change from 0 to 2048 [ 1673.823638][T15494] loop5: detected capacity change from 0 to 2048 [ 1673.829848][T15495] loop2: detected capacity change from 0 to 2048 [ 1673.838663][T15493] EXT4-fs (loop3): bad geometry: first data block 768 is beyond end of filesystem (512) [ 1673.850598][T15495] EXT4-fs (loop2): bad geometry: first data block 8704 is beyond end of filesystem (512) [ 1673.889691][T15493] loop3: detected capacity change from 0 to 2048 [ 1673.905832][T15494] EXT4-fs (loop5): bad geometry: first data block 183762943 is beyond end of filesystem (512) [ 1673.931780][T15493] EXT4-fs (loop3): bad geometry: first data block 768 is beyond end of filesystem (512) [ 1673.947070][T15495] loop2: detected capacity change from 0 to 2048 [ 1673.965541][T15495] EXT4-fs (loop2): bad geometry: first data block 8704 is beyond end of filesystem (512) [ 1674.006277][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.014329][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1674.030355][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.038328][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1674.050419][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.058418][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1674.097016][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.105027][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1674.116511][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.124539][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1674.209897][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.217897][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1674.234212][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.242205][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1674.253638][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.261616][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1674.299461][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:41 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000b0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002500000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000400000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000048004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1674.307448][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1674.318892][T15461] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.326869][T15461] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1674.421193][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.429193][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1674.445991][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.453960][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1674.465324][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.473303][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1674.512230][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.520263][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1674.531710][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.539691][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500000009c004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1674.585999][T15527] loop3: detected capacity change from 0 to 2048 [ 1674.588656][T15528] loop5: detected capacity change from 0 to 2048 [ 1674.595671][T15529] loop2: detected capacity change from 0 to 2048 [ 1674.605331][T15528] EXT4-fs (loop5): bad geometry: first data block 184549376 is beyond end of filesystem (512) [ 1674.615869][T15529] EXT4-fs (loop2): bad geometry: first data block 9472 is beyond end of filesystem (512) [ 1674.626505][T15527] EXT4-fs (loop3): bad geometry: first data block 1024 is beyond end of filesystem (512) [ 1674.657231][T15528] loop5: detected capacity change from 0 to 2048 [ 1674.664296][T15528] EXT4-fs (loop5): bad geometry: first data block 184549376 is beyond end of filesystem (512) [ 1674.675592][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.683581][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1674.696365][T15527] loop3: detected capacity change from 0 to 2048 [ 1674.703262][T15529] loop2: detected capacity change from 0 to 2048 [ 1674.710418][T15527] EXT4-fs (loop3): bad geometry: first data block 1024 is beyond end of filesystem (512) [ 1674.713369][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.721124][T15529] EXT4-fs (loop2): bad geometry: first data block 9472 is beyond end of filesystem (512) [ 1674.728220][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1674.749500][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000c0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000500000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002e00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1674.757652][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:42 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x0, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) [ 1674.806779][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.814753][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1674.826202][T15498] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1674.834179][T15498] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500fffffff604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1674.897167][T15555] loop5: detected capacity change from 0 to 2048 [ 1674.902096][T15554] loop3: detected capacity change from 0 to 2048 [ 1674.905519][T15556] loop2: detected capacity change from 0 to 2048 [ 1674.919133][T15555] EXT4-fs (loop5): bad geometry: first data block 201326592 is beyond end of filesystem (512) [ 1674.931854][T15554] EXT4-fs (loop3): bad geometry: first data block 1280 is beyond end of filesystem (512) [ 1674.931869][T15556] EXT4-fs (loop2): bad geometry: first data block 11776 is beyond end of filesystem (512) [ 1674.977064][T15555] loop5: detected capacity change from 0 to 2048 [ 1674.983978][T15556] loop2: detected capacity change from 0 to 2048 [ 1674.991113][T15555] EXT4-fs (loop5): bad geometry: first data block 201326592 is beyond end of filesystem (512) [ 1674.993317][T15554] loop3: detected capacity change from 0 to 2048 [ 1675.008543][T15556] EXT4-fs (loop2): bad geometry: first data block 11776 is beyond end of filesystem (512) [ 1675.010091][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.019706][T15554] EXT4-fs (loop3): bad geometry: first data block 1280 is beyond end of filesystem (512) [ 1675.026506][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1675.052399][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.060471][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:15:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000d0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1675.072020][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.080087][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1675.131321][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.139318][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1675.151266][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.159250][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1675.222690][T15576] loop5: detected capacity change from 0 to 2048 [ 1675.256402][T15576] EXT4-fs (loop5): bad geometry: first data block 218103808 is beyond end of filesystem (512) [ 1675.309433][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.317441][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1675.334182][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.342256][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1675.354391][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.358423][T15576] loop5: detected capacity change from 0 to 2048 [ 1675.362409][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1675.369476][T15576] EXT4-fs (loop5): bad geometry: first data block 218103808 is beyond end of filesystem (512) 02:15:42 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000600000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500fffffffe04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000e0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1675.410012][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.418016][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1675.429885][T15522] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.437866][T15522] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500f6ffffff04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1675.520598][T15595] loop2: detected capacity change from 0 to 2048 [ 1675.524537][T15592] loop5: detected capacity change from 0 to 2048 [ 1675.531518][T15595] EXT4-fs (loop2): bad geometry: first data block 12800 is beyond end of filesystem (512) [ 1675.538302][T15594] loop3: detected capacity change from 0 to 2048 [ 1675.559855][T15592] EXT4-fs (loop5): bad geometry: first data block 234881024 is beyond end of filesystem (512) [ 1675.570401][T15594] EXT4-fs (loop3): bad geometry: first data block 1536 is beyond end of filesystem (512) [ 1675.582153][T15595] loop2: detected capacity change from 0 to 2048 [ 1675.589249][T15595] EXT4-fs (loop2): bad geometry: first data block 12800 is beyond end of filesystem (512) [ 1675.617300][T15592] loop5: detected capacity change from 0 to 2048 [ 1675.627693][T15594] loop3: detected capacity change from 0 to 2048 [ 1675.629879][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.641975][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1675.643726][T15594] EXT4-fs (loop3): bad geometry: first data block 1536 is beyond end of filesystem (512) 02:15:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000004200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1675.653278][T15592] EXT4-fs (loop5): bad geometry: first data block 234881024 is beyond end of filesystem (512) [ 1675.678861][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.686912][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1675.698421][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.706405][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000f0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000700000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1675.745699][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.753680][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1675.765116][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.773168][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1675.831335][T15617] loop2: detected capacity change from 0 to 2048 [ 1675.842998][T15617] EXT4-fs (loop2): bad geometry: first data block 16896 is beyond end of filesystem (512) [ 1675.906783][T15617] loop2: detected capacity change from 0 to 2048 [ 1675.916045][T15617] EXT4-fs (loop2): bad geometry: first data block 16896 is beyond end of filesystem (512) [ 1675.927114][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.935080][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1675.951137][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.959160][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1675.970601][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1675.978617][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:43 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x0, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500feffffff04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000004800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1676.019353][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.027326][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1676.038899][T15570] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.046954][T15570] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1676.103347][T15626] loop3: detected capacity change from 0 to 2048 [ 1676.113392][T15626] EXT4-fs (loop3): bad geometry: first data block 1792 is beyond end of filesystem (512) [ 1676.117316][T15628] loop5: detected capacity change from 0 to 2048 [ 1676.158406][T15628] EXT4-fs (loop5): bad geometry: first data block 251658240 is beyond end of filesystem (512) [ 1676.206824][T15628] loop5: detected capacity change from 0 to 2048 [ 1676.212471][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.213739][T15628] EXT4-fs (loop5): bad geometry: first data block 251658240 is beyond end of filesystem (512) [ 1676.221134][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1676.247689][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.255736][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1676.267346][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.275458][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1676.313897][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.321878][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1676.333398][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.341404][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1676.383509][T15643] loop2: detected capacity change from 0 to 2048 [ 1676.394467][T15643] EXT4-fs (loop2): bad geometry: first data block 18432 is beyond end of filesystem (512) [ 1676.417157][T15643] loop2: detected capacity change from 0 to 2048 [ 1676.424317][T15643] EXT4-fs (loop2): bad geometry: first data block 18432 is beyond end of filesystem (512) [ 1676.451949][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.459935][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1676.476441][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.484469][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1676.495877][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.503836][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:43 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000100100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000002000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000004c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1676.545270][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.553306][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1676.565251][T15591] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.573248][T15591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1676.670854][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.678866][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1676.695452][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.703509][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1676.715008][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.722987][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1676.760834][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.768875][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1676.780305][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.788283][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000003000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1676.844642][T15661] loop2: detected capacity change from 0 to 2048 [ 1676.851710][T15662] loop3: detected capacity change from 0 to 2048 [ 1676.851789][T15660] loop5: detected capacity change from 0 to 2048 [ 1676.870515][T15661] EXT4-fs (loop2): bad geometry: first data block 19456 is beyond end of filesystem (512) [ 1676.881383][T15660] EXT4-fs (loop5): bad geometry: first data block 268435456 is beyond end of filesystem (512) [ 1676.883120][T15662] EXT4-fs (loop3): bad geometry: first data block 2048 is beyond end of filesystem (512) [ 1676.916725][T15660] loop5: detected capacity change from 0 to 2048 [ 1676.917079][T15661] loop2: detected capacity change from 0 to 2048 [ 1676.929765][T15660] EXT4-fs (loop5): bad geometry: first data block 268435456 is beyond end of filesystem (512) [ 1676.940423][T15661] EXT4-fs (loop2): bad geometry: first data block 19456 is beyond end of filesystem (512) [ 1676.958831][T15662] loop3: detected capacity change from 0 to 2048 [ 1676.959624][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1676.973127][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1676.976223][T15662] EXT4-fs (loop3): bad geometry: first data block 2048 is beyond end of filesystem (512) 02:15:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000110100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000900000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000006000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1676.999411][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.007395][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1677.029641][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.037640][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1677.078872][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.086962][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1677.098957][T15636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.106941][T15636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:44 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x0, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000002000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1677.154359][T15682] loop2: detected capacity change from 0 to 2048 [ 1677.161694][T15683] loop5: detected capacity change from 0 to 2048 [ 1677.172917][T15683] EXT4-fs (loop5): bad geometry: first data block 285212672 is beyond end of filesystem (512) [ 1677.183737][T15682] EXT4-fs (loop2): bad geometry: first data block 24576 is beyond end of filesystem (512) [ 1677.197222][T15687] loop3: detected capacity change from 0 to 2048 [ 1677.205426][T15687] EXT4-fs (loop3): bad geometry: first data block 2304 is beyond end of filesystem (512) [ 1677.237081][T15683] loop5: detected capacity change from 0 to 2048 [ 1677.237153][T15682] loop2: detected capacity change from 0 to 2048 [ 1677.250803][T15683] EXT4-fs (loop5): bad geometry: first data block 285212672 is beyond end of filesystem (512) [ 1677.263250][T15687] loop3: detected capacity change from 0 to 2048 [ 1677.263973][T15682] EXT4-fs (loop2): bad geometry: first data block 24576 is beyond end of filesystem (512) [ 1677.271304][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.287524][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000120100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1677.299605][T15687] EXT4-fs (loop3): bad geometry: first data block 2304 is beyond end of filesystem (512) [ 1677.314027][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.322034][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1677.333775][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.341791][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1677.382034][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.390013][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1677.401430][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.409422][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1677.467147][T15705] loop5: detected capacity change from 0 to 2048 [ 1677.476680][T15705] EXT4-fs (loop5): bad geometry: first data block 301989888 is beyond end of filesystem (512) [ 1677.521048][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.529034][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1677.542386][T15705] loop5: detected capacity change from 0 to 2048 [ 1677.548377][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.556672][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1677.568304][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.568399][T15705] EXT4-fs (loop5): bad geometry: first data block 301989888 is beyond end of filesystem (512) [ 1677.576307][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1677.633384][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.641372][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1677.652933][T15656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.660917][T15656] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:44 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000a00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000006800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000003000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000001f0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1677.777708][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.785697][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1677.802450][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.810436][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1677.821810][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.829840][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1677.866614][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.874633][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1677.885994][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1677.893956][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000004000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1677.957490][T15721] loop3: detected capacity change from 0 to 2048 [ 1677.975844][T15725] loop5: detected capacity change from 0 to 2048 [ 1677.976775][T15723] loop2: detected capacity change from 0 to 2048 [ 1677.993066][T15721] EXT4-fs (loop3): bad geometry: first data block 2560 is beyond end of filesystem (512) [ 1678.003669][T15725] EXT4-fs (loop5): bad geometry: first data block 520093696 is beyond end of filesystem (512) [ 1678.014290][T15723] EXT4-fs (loop2): bad geometry: first data block 26624 is beyond end of filesystem (512) [ 1678.036794][T15721] loop3: detected capacity change from 0 to 2048 [ 1678.043974][T15721] EXT4-fs (loop3): bad geometry: first data block 2560 is beyond end of filesystem (512) [ 1678.053764][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.053777][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1678.059597][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.081027][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1678.088019][T15723] loop2: detected capacity change from 0 to 2048 [ 1678.099119][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000b00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000006c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1678.100704][T15723] EXT4-fs (loop2): bad geometry: first data block 26624 is beyond end of filesystem (512) [ 1678.107125][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1678.130610][T15725] loop5: detected capacity change from 0 to 2048 [ 1678.137611][T15725] EXT4-fs (loop5): bad geometry: first data block 520093696 is beyond end of filesystem (512) 02:15:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000200100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1678.184180][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.192507][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1678.204362][T15700] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.212382][T15700] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:45 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x0, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000005000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1678.276259][T15747] loop2: detected capacity change from 0 to 2048 [ 1678.283006][T15749] loop5: detected capacity change from 0 to 2048 [ 1678.291974][T15750] loop3: detected capacity change from 0 to 2048 [ 1678.301393][T15747] EXT4-fs (loop2): bad geometry: first data block 27648 is beyond end of filesystem (512) [ 1678.311517][T15750] EXT4-fs (loop3): bad geometry: first data block 2816 is beyond end of filesystem (512) [ 1678.322401][T15749] EXT4-fs (loop5): bad geometry: first data block 536870912 is beyond end of filesystem (512) [ 1678.347921][T15747] loop2: detected capacity change from 0 to 2048 [ 1678.355060][T15747] EXT4-fs (loop2): bad geometry: first data block 27648 is beyond end of filesystem (512) [ 1678.358557][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.373001][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1678.384906][T15749] loop5: detected capacity change from 0 to 2048 [ 1678.385574][T15750] loop3: detected capacity change from 0 to 2048 [ 1678.397881][T15749] EXT4-fs (loop5): bad geometry: first data block 536870912 is beyond end of filesystem (512) [ 1678.404328][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000007400000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1678.416124][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1678.425730][T15750] EXT4-fs (loop3): bad geometry: first data block 2816 is beyond end of filesystem (512) [ 1678.427699][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.445399][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1678.491906][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.499907][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1678.511318][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.519433][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1678.595204][T15773] loop2: detected capacity change from 0 to 2048 [ 1678.615395][T15773] EXT4-fs (loop2): bad geometry: first data block 29696 is beyond end of filesystem (512) [ 1678.673802][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.681936][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1678.702431][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.710460][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1678.722164][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.730170][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:46 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x0, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000010200100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000006000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000007a00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1678.769864][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.777850][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1678.789395][T15720] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.797443][T15720] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1678.891158][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.899147][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1678.915361][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.923353][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1678.934829][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.942809][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1678.981574][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1678.989550][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1679.000989][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.008967][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000007000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1679.061447][T15786] loop2: detected capacity change from 0 to 2048 [ 1679.064359][T15787] loop3: detected capacity change from 0 to 2048 [ 1679.069334][T15788] loop5: detected capacity change from 0 to 2048 [ 1679.084886][T15787] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (512) [ 1679.095660][T15786] EXT4-fs (loop2): bad geometry: first data block 31232 is beyond end of filesystem (512) [ 1679.105806][T15788] EXT4-fs (loop5): bad geometry: first data block 537919488 is beyond end of filesystem (512) [ 1679.136682][T15787] loop3: detected capacity change from 0 to 2048 [ 1679.143714][T15787] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (512) [ 1679.151513][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.161504][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1679.168042][T15788] loop5: detected capacity change from 0 to 2048 02:15:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000d00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1679.180986][T15788] EXT4-fs (loop5): bad geometry: first data block 537919488 is beyond end of filesystem (512) [ 1679.182311][T15786] loop2: detected capacity change from 0 to 2048 [ 1679.201677][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.209659][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1679.221803][T15786] EXT4-fs (loop2): bad geometry: first data block 31232 is beyond end of filesystem (512) 02:15:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000bc6364200100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1679.232471][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.240525][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fe00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1679.280356][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.288356][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1679.300345][T15764] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.308508][T15764] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:46 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x0, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000008000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1679.388938][T15813] loop2: detected capacity change from 0 to 2048 [ 1679.395723][T15814] loop3: detected capacity change from 0 to 2048 [ 1679.407354][T15813] EXT4-fs (loop2): bad geometry: first data block 65024 is beyond end of filesystem (512) [ 1679.417502][T15815] loop5: detected capacity change from 0 to 2048 [ 1679.424817][T15814] EXT4-fs (loop3): bad geometry: first data block 3328 is beyond end of filesystem (512) [ 1679.438332][T15815] EXT4-fs (loop5): bad geometry: first data block 543450044 is beyond end of filesystem (512) [ 1679.462669][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.470652][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1679.486472][T15813] loop2: detected capacity change from 0 to 2048 [ 1679.487477][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.494700][T15813] EXT4-fs (loop2): bad geometry: first data block 65024 is beyond end of filesystem (512) [ 1679.500764][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1679.502014][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.511656][T15814] loop3: detected capacity change from 0 to 2048 [ 1679.521925][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1679.535941][T15815] loop5: detected capacity change from 0 to 2048 [ 1679.548022][T15814] EXT4-fs (loop3): bad geometry: first data block 3328 is beyond end of filesystem (512) [ 1679.564662][T15815] EXT4-fs (loop5): bad geometry: first data block 543450044 is beyond end of filesystem (512) 02:15:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000e00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1679.582290][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.590284][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1679.601793][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.609849][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1679.687975][T15833] loop3: detected capacity change from 0 to 2048 [ 1679.721321][T15833] EXT4-fs (loop3): bad geometry: first data block 3584 is beyond end of filesystem (512) [ 1679.805560][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.813612][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1679.831570][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.839593][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1679.851097][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.859092][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:47 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x0, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000220100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000402000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000018000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000f00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1679.899324][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.907302][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1679.918784][T15781] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1679.926830][T15781] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1680.025557][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.033609][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1680.049858][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.057841][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1680.069372][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.077358][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1680.116284][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.124246][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1680.135738][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.143782][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500001c000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1680.185700][T15850] loop3: detected capacity change from 0 to 2048 [ 1680.203087][T15850] EXT4-fs (loop3): bad geometry: first data block 3840 is beyond end of filesystem (512) [ 1680.203788][T15853] loop5: detected capacity change from 0 to 2048 [ 1680.213535][T15855] loop2: detected capacity change from 0 to 2048 [ 1680.230214][T15855] EXT4-fs (loop2): bad geometry: first data block 132096 is beyond end of filesystem (512) [ 1680.243622][T15853] EXT4-fs (loop5): bad geometry: first data block 570425344 is beyond end of filesystem (512) [ 1680.266836][T15850] loop3: detected capacity change from 0 to 2048 [ 1680.267154][T15855] loop2: detected capacity change from 0 to 2048 [ 1680.281669][T15850] EXT4-fs (loop3): bad geometry: first data block 3840 is beyond end of filesystem (512) [ 1680.292462][T15853] loop5: detected capacity change from 0 to 2048 [ 1680.298746][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.306779][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1680.307495][T15853] EXT4-fs (loop5): bad geometry: first data block 570425344 is beyond end of filesystem (512) 02:15:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000240100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1680.328862][T15855] EXT4-fs (loop2): bad geometry: first data block 132096 is beyond end of filesystem (512) [ 1680.344058][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.352038][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1680.363496][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.371483][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:47 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x0, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) [ 1680.429205][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.437199][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1680.448794][T15827] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.456800][T15827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000026000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1680.518192][T15875] loop3: detected capacity change from 0 to 2048 [ 1680.535783][T15877] loop2: detected capacity change from 0 to 2048 [ 1680.547812][T15875] EXT4-fs (loop3): bad geometry: first data block 4096 is beyond end of filesystem (512) [ 1680.558439][T15877] EXT4-fs (loop2): bad geometry: first data block 196608 is beyond end of filesystem (512) [ 1680.559772][T15882] loop5: detected capacity change from 0 to 2048 [ 1680.586673][T15875] loop3: detected capacity change from 0 to 2048 [ 1680.593435][T15882] EXT4-fs (loop5): bad geometry: first data block 603979776 is beyond end of filesystem (512) [ 1680.594569][T15875] EXT4-fs (loop3): bad geometry: first data block 4096 is beyond end of filesystem (512) [ 1680.614902][T15877] loop2: detected capacity change from 0 to 2048 [ 1680.622875][T15877] EXT4-fs (loop2): bad geometry: first data block 196608 is beyond end of filesystem (512) [ 1680.650089][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001100000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1680.658110][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1680.671191][T15882] loop5: detected capacity change from 0 to 2048 [ 1680.675891][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.678801][T15882] EXT4-fs (loop5): bad geometry: first data block 603979776 is beyond end of filesystem (512) [ 1680.685536][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1680.685811][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.715066][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1680.764462][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.772473][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1680.784278][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.792276][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1680.833558][T15900] loop3: detected capacity change from 0 to 2048 [ 1680.842038][T15900] EXT4-fs (loop3): bad geometry: first data block 4352 is beyond end of filesystem (512) [ 1680.909400][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.917416][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1680.946107][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.954122][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1680.965850][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1680.973819][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:48 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x0, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c003000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000fe000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000250100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1681.013901][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.021885][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1681.033364][T15846] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.041389][T15846] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1681.135933][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.143981][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1681.160038][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.168035][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1681.179564][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.187750][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1681.226375][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.234407][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1681.245914][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.253882][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1681.284137][T15913] loop5: detected capacity change from 0 to 2048 [ 1681.303130][T15916] loop2: detected capacity change from 0 to 2048 [ 1681.313158][T15916] EXT4-fs (loop2): bad geometry: first data block 245760 is beyond end of filesystem (512) [ 1681.317083][T15917] loop3: detected capacity change from 0 to 2048 02:15:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000004020004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1681.329842][T15913] EXT4-fs (loop5): bad geometry: first data block 620756992 is beyond end of filesystem (512) [ 1681.343463][T15917] EXT4-fs (loop3): bad geometry: first data block 4608 is beyond end of filesystem (512) [ 1681.366447][T15916] loop2: detected capacity change from 0 to 2048 [ 1681.373433][T15916] EXT4-fs (loop2): bad geometry: first data block 245760 is beyond end of filesystem (512) [ 1681.396953][T15913] loop5: detected capacity change from 0 to 2048 [ 1681.398226][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.411265][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1681.424235][T15913] EXT4-fs (loop5): bad geometry: first data block 620756992 is beyond end of filesystem (512) [ 1681.429087][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c103000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000002e0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1681.436847][T15917] loop3: detected capacity change from 0 to 2048 [ 1681.442449][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1681.461185][T15917] EXT4-fs (loop3): bad geometry: first data block 4608 is beyond end of filesystem (512) [ 1681.471069][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.479115][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1681.527621][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.535620][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1681.547512][T15880] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.555500][T15880] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:48 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x0, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) [ 1681.604323][T15939] loop2: detected capacity change from 0 to 2048 02:15:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000030004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1681.644690][T15939] EXT4-fs (loop2): bad geometry: first data block 246016 is beyond end of filesystem (512) [ 1681.644839][T15942] loop3: detected capacity change from 0 to 2048 [ 1681.655106][T15945] loop5: detected capacity change from 0 to 2048 [ 1681.670366][T15945] EXT4-fs (loop5): bad geometry: first data block 771751936 is beyond end of filesystem (512) [ 1681.683143][T15942] EXT4-fs (loop3): bad geometry: first data block 6144 is beyond end of filesystem (512) [ 1681.706286][T15939] loop2: detected capacity change from 0 to 2048 [ 1681.713570][T15939] EXT4-fs (loop2): bad geometry: first data block 246016 is beyond end of filesystem (512) [ 1681.720882][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.731608][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1681.746862][T15942] loop3: detected capacity change from 0 to 2048 [ 1681.753621][T15945] loop5: detected capacity change from 0 to 2048 [ 1681.763466][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.771473][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1681.783274][T15942] EXT4-fs (loop3): bad geometry: first data block 6144 is beyond end of filesystem (512) [ 1681.794018][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000f403000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1681.802023][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1681.813527][T15945] EXT4-fs (loop5): bad geometry: first data block 771751936 is beyond end of filesystem (512) [ 1681.860986][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.869075][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1681.880560][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1681.888560][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1681.931183][T15962] loop2: detected capacity change from 0 to 2048 [ 1681.940166][T15962] EXT4-fs (loop2): bad geometry: first data block 259072 is beyond end of filesystem (512) [ 1681.990171][T15962] loop2: detected capacity change from 0 to 2048 [ 1682.006885][T15962] EXT4-fs (loop2): bad geometry: first data block 259072 is beyond end of filesystem (512) [ 1682.031237][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.039252][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1682.057829][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.065813][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1682.077758][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.085739][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:49 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x0, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000002040004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000f503000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000320100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1682.133730][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.141759][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1682.153725][T15914] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.161713][T15914] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1682.265006][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.273017][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1682.289571][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.297558][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1682.309250][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.317241][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1682.353833][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.361888][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1682.373870][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.381886][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000006040004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1682.421809][T15981] loop3: detected capacity change from 0 to 2048 [ 1682.428780][T15982] loop2: detected capacity change from 0 to 2048 [ 1682.443147][T15985] loop5: detected capacity change from 0 to 2048 [ 1682.450370][T15982] EXT4-fs (loop2): bad geometry: first data block 259328 is beyond end of filesystem (512) [ 1682.460535][T15981] EXT4-fs (loop3): bad geometry: first data block 8704 is beyond end of filesystem (512) [ 1682.473456][T15985] EXT4-fs (loop5): bad geometry: first data block 838860800 is beyond end of filesystem (512) [ 1682.507303][T15982] loop2: detected capacity change from 0 to 2048 [ 1682.509547][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.513936][T15981] loop3: detected capacity change from 0 to 2048 [ 1682.521657][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1682.539971][T15982] EXT4-fs (loop2): bad geometry: first data block 259328 is beyond end of filesystem (512) [ 1682.541265][T15985] loop5: detected capacity change from 0 to 2048 [ 1682.557070][T15981] EXT4-fs (loop3): bad geometry: first data block 8704 is beyond end of filesystem (512) 02:15:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000f603000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002500000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000003f0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1682.562391][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.574853][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1682.586860][T15985] EXT4-fs (loop5): bad geometry: first data block 838860800 is beyond end of filesystem (512) [ 1682.597499][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.605560][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1682.652083][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.660082][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1682.671622][T15958] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.679634][T15958] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1682.719290][T16004] loop2: detected capacity change from 0 to 2048 [ 1682.741852][T16004] EXT4-fs (loop2): bad geometry: first data block 259584 is beyond end of filesystem (512) 02:15:50 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x0, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000080040004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1682.765627][T16010] loop3: detected capacity change from 0 to 2048 [ 1682.770837][T16011] loop5: detected capacity change from 0 to 2048 [ 1682.779677][T16010] EXT4-fs (loop3): bad geometry: first data block 9472 is beyond end of filesystem (512) [ 1682.792072][T16004] loop2: detected capacity change from 0 to 2048 [ 1682.798839][T16011] EXT4-fs (loop5): bad geometry: first data block 1056964608 is beyond end of filesystem (512) [ 1682.799269][T16004] EXT4-fs (loop2): bad geometry: first data block 259584 is beyond end of filesystem (512) [ 1682.836288][T16010] loop3: detected capacity change from 0 to 2048 [ 1682.840668][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.846103][T16010] EXT4-fs (loop3): bad geometry: first data block 9472 is beyond end of filesystem (512) [ 1682.850635][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1682.866322][T16011] loop5: detected capacity change from 0 to 2048 02:15:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000f703000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1682.879318][T16011] EXT4-fs (loop5): bad geometry: first data block 1056964608 is beyond end of filesystem (512) [ 1682.893251][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.901249][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1682.913242][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.921240][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1682.958481][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.966499][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1682.978034][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1682.986106][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1683.066144][T16031] loop2: detected capacity change from 0 to 2048 [ 1683.107615][T16031] EXT4-fs (loop2): bad geometry: first data block 259840 is beyond end of filesystem (512) [ 1683.110332][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.125630][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1683.142480][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.150479][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1683.161990][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.170038][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1683.211094][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.219085][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1683.230909][T15980] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.238897][T15980] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:50 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x0, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002e00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000050004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000400100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000f803000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1683.342270][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.350274][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1683.367135][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.375119][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1683.386904][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.394863][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1683.433856][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.441826][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1683.453669][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.461703][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500002f050004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1683.500089][T16046] loop3: detected capacity change from 0 to 2048 [ 1683.504273][T16048] loop5: detected capacity change from 0 to 2048 [ 1683.515158][T16048] EXT4-fs (loop5): bad geometry: first data block 1073741824 is beyond end of filesystem (512) [ 1683.523850][T16051] loop2: detected capacity change from 0 to 2048 [ 1683.533587][T16046] EXT4-fs (loop3): bad geometry: first data block 11776 is beyond end of filesystem (512) [ 1683.544034][T16051] EXT4-fs (loop2): bad geometry: first data block 260096 is beyond end of filesystem (512) [ 1683.566426][T16048] loop5: detected capacity change from 0 to 2048 [ 1683.573419][T16048] EXT4-fs (loop5): bad geometry: first data block 1073741824 is beyond end of filesystem (512) [ 1683.586221][T16051] loop2: detected capacity change from 0 to 2048 [ 1683.587364][T16046] loop3: detected capacity change from 0 to 2048 02:15:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000800400100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1683.599211][T16051] EXT4-fs (loop2): bad geometry: first data block 260096 is beyond end of filesystem (512) [ 1683.609972][T16046] EXT4-fs (loop3): bad geometry: first data block 11776 is beyond end of filesystem (512) [ 1683.610419][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.627954][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000f903000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1683.644485][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.652565][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1683.674093][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.682185][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1683.721005][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.728986][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1683.741151][T16024] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.749145][T16024] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:51 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x0, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000060004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1683.802412][T16069] loop3: detected capacity change from 0 to 2048 [ 1683.817991][T16072] loop2: detected capacity change from 0 to 2048 [ 1683.828390][T16069] EXT4-fs (loop3): bad geometry: first data block 12800 is beyond end of filesystem (512) [ 1683.838559][T16072] EXT4-fs (loop2): bad geometry: first data block 260352 is beyond end of filesystem (512) [ 1683.846999][T16075] loop5: detected capacity change from 0 to 2048 [ 1683.857147][T16075] EXT4-fs (loop5): bad geometry: first data block 1073743872 is beyond end of filesystem (512) [ 1683.886876][T16069] loop3: detected capacity change from 0 to 2048 [ 1683.893504][T16072] loop2: detected capacity change from 0 to 2048 [ 1683.901617][T16069] EXT4-fs (loop3): bad geometry: first data block 12800 is beyond end of filesystem (512) [ 1683.902047][T16075] loop5: detected capacity change from 0 to 2048 [ 1683.912235][T16072] EXT4-fs (loop2): bad geometry: first data block 260352 is beyond end of filesystem (512) [ 1683.920208][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.936425][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:15:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fa03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1683.936848][T16075] EXT4-fs (loop5): bad geometry: first data block 1073743872 is beyond end of filesystem (512) [ 1683.954177][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.966048][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1683.978183][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1683.986178][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1684.025610][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.033578][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1684.045373][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.053366][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1684.096803][T16091] loop2: detected capacity change from 0 to 2048 [ 1684.109413][T16091] EXT4-fs (loop2): bad geometry: first data block 260608 is beyond end of filesystem (512) [ 1684.152340][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.160344][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1684.172812][T16091] loop2: detected capacity change from 0 to 2048 [ 1684.179928][T16091] EXT4-fs (loop2): bad geometry: first data block 260608 is beyond end of filesystem (512) [ 1684.181719][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.197935][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1684.209408][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.217514][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:51 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x0, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000420100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000004060004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000204000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1684.257653][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.265654][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1684.277304][T16042] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.285412][T16042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1684.405834][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.413815][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1684.430056][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.438099][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1684.449645][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.457621][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1684.497118][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.505186][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1684.516742][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.524707][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000070004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1684.577685][T16109] loop5: detected capacity change from 0 to 2048 [ 1684.590709][T16110] loop2: detected capacity change from 0 to 2048 [ 1684.598105][T16108] loop3: detected capacity change from 0 to 2048 [ 1684.601028][T16109] EXT4-fs (loop5): bad geometry: first data block 1107296256 is beyond end of filesystem (512) [ 1684.621913][T16110] EXT4-fs (loop2): bad geometry: first data block 262656 is beyond end of filesystem (512) [ 1684.632414][T16108] EXT4-fs (loop3): bad geometry: first data block 14336 is beyond end of filesystem (512) [ 1684.657666][T16109] loop5: detected capacity change from 0 to 2048 [ 1684.664443][T16110] loop2: detected capacity change from 0 to 2048 [ 1684.671700][T16109] EXT4-fs (loop5): bad geometry: first data block 1107296256 is beyond end of filesystem (512) [ 1684.682674][T16110] EXT4-fs (loop2): bad geometry: first data block 262656 is beyond end of filesystem (512) [ 1684.687006][T16108] loop3: detected capacity change from 0 to 2048 [ 1684.699603][T16108] EXT4-fs (loop3): bad geometry: first data block 14336 is beyond end of filesystem (512) [ 1684.704595][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003900000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1684.717602][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1684.733924][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.741914][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1684.753451][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.761560][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000480100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000604000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1684.819884][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.827890][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1684.839415][T16089] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1684.847634][T16089] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:52 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000c0090004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1684.913920][T16134] loop3: detected capacity change from 0 to 2048 [ 1684.918065][T16136] loop2: detected capacity change from 0 to 2048 [ 1684.929507][T16134] EXT4-fs (loop3): bad geometry: first data block 14592 is beyond end of filesystem (512) [ 1684.929923][T16137] loop5: detected capacity change from 0 to 2048 [ 1684.948567][T16137] EXT4-fs (loop5): bad geometry: first data block 1207959552 is beyond end of filesystem (512) [ 1684.962236][T16136] EXT4-fs (loop2): bad geometry: first data block 263680 is beyond end of filesystem (512) [ 1685.003457][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.011471][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1685.027455][T16136] loop2: detected capacity change from 0 to 2048 [ 1685.030793][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.034726][T16134] loop3: detected capacity change from 0 to 2048 [ 1685.041832][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1685.043604][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.048474][T16136] EXT4-fs (loop2): bad geometry: first data block 263680 is beyond end of filesystem (512) [ 1685.059475][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1685.068255][T16134] EXT4-fs (loop3): bad geometry: first data block 14592 is beyond end of filesystem (512) [ 1685.077873][T16137] loop5: detected capacity change from 0 to 2048 02:15:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003a00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1685.105795][T16137] EXT4-fs (loop5): bad geometry: first data block 1207959552 is beyond end of filesystem (512) [ 1685.145245][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.153342][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1685.165499][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.173662][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1685.241146][T16158] loop3: detected capacity change from 0 to 2048 [ 1685.270236][T16158] EXT4-fs (loop3): bad geometry: first data block 14848 is beyond end of filesystem (512) [ 1685.314450][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.322517][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1685.339097][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.347219][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1685.359073][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.367075][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:52 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000004c0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000180004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000005000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003b00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1685.408633][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.416628][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1685.428238][T16107] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.436241][T16107] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1685.524742][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.532808][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1685.548737][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.556718][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1685.568266][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.576255][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1685.614113][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.622512][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1685.634022][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.642106][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000001c0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1685.685041][T16169] loop2: detected capacity change from 0 to 2048 [ 1685.696764][T16172] loop5: detected capacity change from 0 to 2048 [ 1685.698827][T16173] loop3: detected capacity change from 0 to 2048 [ 1685.709841][T16172] EXT4-fs (loop5): bad geometry: first data block 1275068416 is beyond end of filesystem (512) [ 1685.722253][T16169] EXT4-fs (loop2): bad geometry: first data block 327680 is beyond end of filesystem (512) [ 1685.736315][T16173] EXT4-fs (loop3): bad geometry: first data block 15104 is beyond end of filesystem (512) [ 1685.748333][T16172] loop5: detected capacity change from 0 to 2048 [ 1685.755677][T16172] EXT4-fs (loop5): bad geometry: first data block 1275068416 is beyond end of filesystem (512) [ 1685.775517][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.783555][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1685.796811][T16173] loop3: detected capacity change from 0 to 2048 [ 1685.803758][T16169] loop2: detected capacity change from 0 to 2048 [ 1685.805476][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.818761][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:15:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000600100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000006000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1685.831219][T16173] EXT4-fs (loop3): bad geometry: first data block 15104 is beyond end of filesystem (512) [ 1685.831225][T16169] EXT4-fs (loop2): bad geometry: first data block 327680 is beyond end of filesystem (512) [ 1685.831295][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.859299][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1685.920772][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.928827][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1685.940820][T16152] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1685.948834][T16152] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:53 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000200004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1686.014982][T16197] loop5: detected capacity change from 0 to 2048 [ 1686.018633][T16199] loop2: detected capacity change from 0 to 2048 [ 1686.030736][T16199] EXT4-fs (loop2): bad geometry: first data block 393216 is beyond end of filesystem (512) [ 1686.041639][T16201] loop3: detected capacity change from 0 to 2048 [ 1686.050757][T16201] EXT4-fs (loop3): bad geometry: first data block 15360 is beyond end of filesystem (512) [ 1686.051574][T16197] EXT4-fs (loop5): bad geometry: first data block 1610612736 is beyond end of filesystem (512) [ 1686.096306][T16199] loop2: detected capacity change from 0 to 2048 [ 1686.103478][T16199] EXT4-fs (loop2): bad geometry: first data block 393216 is beyond end of filesystem (512) [ 1686.109183][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.121447][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1686.124804][T16197] loop5: detected capacity change from 0 to 2048 [ 1686.138776][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.139787][T16201] loop3: detected capacity change from 0 to 2048 [ 1686.147038][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:15:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000406000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1686.165164][T16201] EXT4-fs (loop3): bad geometry: first data block 15360 is beyond end of filesystem (512) [ 1686.165626][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.183300][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1686.195860][T16197] EXT4-fs (loop5): bad geometry: first data block 1610612736 is beyond end of filesystem (512) [ 1686.225415][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.233391][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1686.245333][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.253409][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1686.300316][T16220] loop2: detected capacity change from 0 to 2048 [ 1686.308677][T16220] EXT4-fs (loop2): bad geometry: first data block 394240 is beyond end of filesystem (512) [ 1686.408647][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.416705][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1686.433328][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.441328][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1686.452814][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.460805][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1686.499021][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:53 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003d00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000260004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003640100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000007000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1686.507000][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1686.518424][T16170] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.526404][T16170] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1686.621405][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.629387][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1686.646048][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.654013][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1686.665457][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.673440][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1686.710489][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.718469][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1686.729929][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.737916][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000052f0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1686.781524][T16235] loop3: detected capacity change from 0 to 2048 [ 1686.792655][T16236] loop5: detected capacity change from 0 to 2048 [ 1686.799737][T16235] EXT4-fs (loop3): bad geometry: first data block 15616 is beyond end of filesystem (512) [ 1686.804020][T16237] loop2: detected capacity change from 0 to 2048 [ 1686.822945][T16237] EXT4-fs (loop2): bad geometry: first data block 458752 is beyond end of filesystem (512) [ 1686.833242][T16236] EXT4-fs (loop5): bad geometry: first data block 1677918208 is beyond end of filesystem (512) [ 1686.857129][T16235] loop3: detected capacity change from 0 to 2048 [ 1686.863599][T16236] loop5: detected capacity change from 0 to 2048 [ 1686.870987][T16237] loop2: detected capacity change from 0 to 2048 [ 1686.877903][T16235] EXT4-fs (loop3): bad geometry: first data block 15616 is beyond end of filesystem (512) [ 1686.888233][T16237] EXT4-fs (loop2): bad geometry: first data block 458752 is beyond end of filesystem (512) [ 1686.890617][T16236] EXT4-fs (loop5): bad geometry: first data block 1677918208 is beyond end of filesystem (512) 02:15:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fc07000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000003e00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1686.933290][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.941293][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1686.959157][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.967145][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:15:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000680100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1686.979391][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1686.987372][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1687.026483][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.034456][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1687.046254][T16214] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.054241][T16214] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:54 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000003f0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1687.125060][T16263] loop2: detected capacity change from 0 to 2048 [ 1687.128385][T16260] loop5: detected capacity change from 0 to 2048 [ 1687.142277][T16264] loop3: detected capacity change from 0 to 2048 [ 1687.150813][T16263] EXT4-fs (loop2): bad geometry: first data block 523264 is beyond end of filesystem (512) [ 1687.162931][T16264] EXT4-fs (loop3): bad geometry: first data block 15872 is beyond end of filesystem (512) [ 1687.173136][T16260] EXT4-fs (loop5): bad geometry: first data block 1744830464 is beyond end of filesystem (512) [ 1687.195977][T16263] loop2: detected capacity change from 0 to 2048 [ 1687.203005][T16263] EXT4-fs (loop2): bad geometry: first data block 523264 is beyond end of filesystem (512) [ 1687.205518][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.221309][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1687.233889][T16264] loop3: detected capacity change from 0 to 2048 [ 1687.236699][T16260] loop5: detected capacity change from 0 to 2048 [ 1687.240839][T16264] EXT4-fs (loop3): bad geometry: first data block 15872 is beyond end of filesystem (512) [ 1687.256721][T16260] EXT4-fs (loop5): bad geometry: first data block 1744830464 is beyond end of filesystem (512) [ 1687.262213][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000009000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1687.275029][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1687.286644][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.294611][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1687.338800][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.346995][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1687.395049][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.403041][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1687.479395][T16282] loop2: detected capacity change from 0 to 2048 [ 1687.511540][T16282] EXT4-fs (loop2): bad geometry: first data block 589824 is beyond end of filesystem (512) [ 1687.575954][T16282] loop2: detected capacity change from 0 to 2048 [ 1687.582554][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.588069][T16282] EXT4-fs (loop2): bad geometry: first data block 589824 is beyond end of filesystem (512) [ 1687.590557][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1687.618719][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.626719][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1687.638389][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.646390][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:55 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000004200000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000006c0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000400004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000a000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1687.691911][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.699900][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1687.711716][T16230] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.719762][T16230] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1687.827187][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.835239][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1687.851832][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.859846][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1687.871441][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.879481][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1687.918108][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.926100][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1687.937668][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1687.945781][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000004800004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000b000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1687.985506][T16301] loop5: detected capacity change from 0 to 2048 [ 1687.992890][T16304] loop2: detected capacity change from 0 to 2048 [ 1688.005985][T16304] EXT4-fs (loop2): bad geometry: first data block 655360 is beyond end of filesystem (512) [ 1688.006190][T16303] loop3: detected capacity change from 0 to 2048 [ 1688.028004][T16303] EXT4-fs (loop3): bad geometry: first data block 16896 is beyond end of filesystem (512) [ 1688.043793][T16301] EXT4-fs (loop5): bad geometry: first data block 1811939328 is beyond end of filesystem (512) [ 1688.068205][T16303] loop3: detected capacity change from 0 to 2048 [ 1688.075448][T16301] loop5: detected capacity change from 0 to 2048 02:15:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000740100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000004800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1688.089929][T16303] EXT4-fs (loop3): bad geometry: first data block 16896 is beyond end of filesystem (512) [ 1688.092399][T16301] EXT4-fs (loop5): bad geometry: first data block 1811939328 is beyond end of filesystem (512) [ 1688.173472][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.181506][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1688.198414][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.206397][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1688.218289][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.226274][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1688.266454][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.274419][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1688.287171][T16279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.295239][T16279] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:55 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000009c00004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1688.339913][T16327] loop2: detected capacity change from 0 to 2048 [ 1688.346564][T16326] loop5: detected capacity change from 0 to 2048 [ 1688.346800][T16328] loop3: detected capacity change from 0 to 2048 [ 1688.370937][T16327] EXT4-fs (loop2): bad geometry: first data block 720896 is beyond end of filesystem (512) [ 1688.381380][T16326] EXT4-fs (loop5): bad geometry: first data block 1946157056 is beyond end of filesystem (512) [ 1688.392004][T16328] EXT4-fs (loop3): bad geometry: first data block 18432 is beyond end of filesystem (512) [ 1688.404150][T16327] loop2: detected capacity change from 0 to 2048 [ 1688.411168][T16327] EXT4-fs (loop2): bad geometry: first data block 720896 is beyond end of filesystem (512) 02:15:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000007a0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1688.448041][T16328] loop3: detected capacity change from 0 to 2048 [ 1688.457949][T16328] EXT4-fs (loop3): bad geometry: first data block 18432 is beyond end of filesystem (512) [ 1688.470974][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.479046][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1688.496677][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.504790][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1688.516820][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.524810][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1688.563030][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.571038][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1688.582685][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.590700][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1688.629269][T16347] loop5: detected capacity change from 0 to 2048 [ 1688.640957][T16347] EXT4-fs (loop5): bad geometry: first data block 2046820352 is beyond end of filesystem (512) [ 1688.676104][T16347] loop5: detected capacity change from 0 to 2048 [ 1688.695060][T16347] EXT4-fs (loop5): bad geometry: first data block 2046820352 is beyond end of filesystem (512) [ 1688.718307][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.726283][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1688.742305][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.750343][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1688.761855][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.769926][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:56 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000c000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000004c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000fffe0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000ffffff850100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1688.807701][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.815692][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1688.827130][T16296] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.835121][T16296] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1688.949388][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.957379][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1688.973628][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1688.981608][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1688.992972][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.000951][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1689.038338][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.046315][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1689.057850][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.065853][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000feff0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1689.096996][T16364] loop3: detected capacity change from 0 to 2048 [ 1689.103610][T16365] loop5: detected capacity change from 0 to 2048 [ 1689.108076][T16367] loop2: detected capacity change from 0 to 2048 [ 1689.117529][T16364] EXT4-fs (loop3): bad geometry: first data block 19456 is beyond end of filesystem (512) [ 1689.128890][T16367] EXT4-fs (loop2): bad geometry: first data block 786432 is beyond end of filesystem (512) [ 1689.139207][T16365] EXT4-fs (loop5): bad geometry: first data block 2248146943 is beyond end of filesystem (512) [ 1689.176002][T16364] loop3: detected capacity change from 0 to 2048 [ 1689.176155][T16367] loop2: detected capacity change from 0 to 2048 [ 1689.189185][T16364] EXT4-fs (loop3): bad geometry: first data block 19456 is beyond end of filesystem (512) [ 1689.190730][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.207076][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1689.219349][T16365] loop5: detected capacity change from 0 to 2048 [ 1689.226146][T16367] EXT4-fs (loop2): bad geometry: first data block 786432 is beyond end of filesystem (512) [ 1689.236396][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.244362][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1689.256115][T16365] EXT4-fs (loop5): bad geometry: first data block 2248146943 is beyond end of filesystem (512) [ 1689.256299][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000006000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1689.274415][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000ffffff8c0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000d000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1689.323807][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.331803][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1689.352643][T16341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.360627][T16341] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:56 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000005000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1689.413692][T16387] loop3: detected capacity change from 0 to 2048 [ 1689.425268][T16391] loop5: detected capacity change from 0 to 2048 [ 1689.434243][T16387] EXT4-fs (loop3): bad geometry: first data block 24576 is beyond end of filesystem (512) [ 1689.440114][T16392] loop2: detected capacity change from 0 to 2048 [ 1689.445325][T16391] EXT4-fs (loop5): bad geometry: first data block 2365587455 is beyond end of filesystem (512) 02:15:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000006800000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1689.464562][T16392] EXT4-fs (loop2): bad geometry: first data block 851968 is beyond end of filesystem (512) [ 1689.507525][T16391] loop5: detected capacity change from 0 to 2048 [ 1689.513238][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.514650][T16391] EXT4-fs (loop5): bad geometry: first data block 2365587455 is beyond end of filesystem (512) [ 1689.521845][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1689.528893][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.533226][T16392] loop2: detected capacity change from 0 to 2048 [ 1689.543552][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1689.552139][T16392] EXT4-fs (loop2): bad geometry: first data block 851968 is beyond end of filesystem (512) [ 1689.559232][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.587079][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1689.626624][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.634640][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1689.646207][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.654202][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1689.706243][T16409] loop3: detected capacity change from 0 to 2048 [ 1689.726623][T16409] EXT4-fs (loop3): bad geometry: first data block 26624 is beyond end of filesystem (512) [ 1689.799257][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.807262][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1689.823319][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.831302][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1689.842721][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.850695][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000e000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000ffffff970100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000010000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000006c00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) [ 1689.890844][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.898965][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1689.910388][T16361] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1689.918369][T16361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1690.013191][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.021311][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1690.037092][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.045072][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1690.056783][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.064765][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1690.104186][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.112178][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1690.123603][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.131588][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000020000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1690.163908][T16422] loop5: detected capacity change from 0 to 2048 [ 1690.167373][T16425] loop2: detected capacity change from 0 to 2048 [ 1690.177278][T16426] loop3: detected capacity change from 0 to 2048 [ 1690.184452][T16422] EXT4-fs (loop5): bad geometry: first data block 2550136831 is beyond end of filesystem (512) [ 1690.197569][T16426] EXT4-fs (loop3): bad geometry: first data block 27648 is beyond end of filesystem (512) [ 1690.209525][T16425] EXT4-fs (loop2): bad geometry: first data block 917504 is beyond end of filesystem (512) [ 1690.225676][T16422] loop5: detected capacity change from 0 to 2048 [ 1690.232595][T16422] EXT4-fs (loop5): bad geometry: first data block 2550136831 is beyond end of filesystem (512) [ 1690.244179][T16426] loop3: detected capacity change from 0 to 2048 [ 1690.244567][T16425] loop2: detected capacity change from 0 to 2048 02:15:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000990100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1690.257408][T16426] EXT4-fs (loop3): bad geometry: first data block 27648 is beyond end of filesystem (512) [ 1690.267899][T16425] EXT4-fs (loop2): bad geometry: first data block 917504 is beyond end of filesystem (512) [ 1690.277489][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.285869][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1690.302672][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000f000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000007400000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1690.310799][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1690.322470][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.330458][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1690.371998][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.379979][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1690.391401][T16407] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.399384][T16407] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:57 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000088000000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1690.450902][T16451] loop3: detected capacity change from 0 to 2048 [ 1690.463300][T16451] EXT4-fs (loop3): bad geometry: first data block 29696 is beyond end of filesystem (512) [ 1690.468494][T16453] loop5: detected capacity change from 0 to 2048 [ 1690.480089][T16454] loop2: detected capacity change from 0 to 2048 [ 1690.488956][T16454] EXT4-fs (loop2): bad geometry: first data block 983040 is beyond end of filesystem (512) [ 1690.499735][T16453] EXT4-fs (loop5): bad geometry: first data block 2566914048 is beyond end of filesystem (512) [ 1690.511406][T16451] loop3: detected capacity change from 0 to 2048 [ 1690.518581][T16451] EXT4-fs (loop3): bad geometry: first data block 29696 is beyond end of filesystem (512) [ 1690.529782][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.537762][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1690.550255][T16454] loop2: detected capacity change from 0 to 2048 [ 1690.561174][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.569185][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1690.581630][T16454] EXT4-fs (loop2): bad geometry: first data block 983040 is beyond end of filesystem (512) [ 1690.593234][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000007a00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1690.593487][T16453] loop5: detected capacity change from 0 to 2048 [ 1690.601241][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1690.619117][T16453] EXT4-fs (loop5): bad geometry: first data block 2566914048 is beyond end of filesystem (512) 02:15:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002010000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000009a0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000020004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1690.647475][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.655460][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1690.666969][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.674965][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1690.744375][T16476] loop2: detected capacity change from 0 to 2048 [ 1690.758308][T16479] loop5: detected capacity change from 0 to 2048 [ 1690.765312][T16477] loop3: detected capacity change from 0 to 2048 [ 1690.774626][T16476] EXT4-fs (loop2): bad geometry: first data block 1056768 is beyond end of filesystem (512) [ 1690.787232][T16479] EXT4-fs (loop5): bad geometry: first data block 2583691264 is beyond end of filesystem (512) [ 1690.810413][T16477] EXT4-fs (loop3): bad geometry: first data block 31232 is beyond end of filesystem (512) [ 1690.834971][T16476] loop2: detected capacity change from 0 to 2048 [ 1690.842492][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.850489][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1690.858394][T16476] EXT4-fs (loop2): bad geometry: first data block 1056768 is beyond end of filesystem (512) [ 1690.875579][T16479] loop5: detected capacity change from 0 to 2048 [ 1690.881864][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.889898][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1690.895592][T16479] EXT4-fs (loop5): bad geometry: first data block 2583691264 is beyond end of filesystem (512) [ 1690.904183][T16477] loop3: detected capacity change from 0 to 2048 [ 1690.927704][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000011000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1690.927789][T16477] EXT4-fs (loop3): bad geometry: first data block 31232 is beyond end of filesystem (512) [ 1690.935714][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1690.979464][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1690.987482][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1691.001931][T16423] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.009943][T16423] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1691.039203][T16501] loop2: detected capacity change from 0 to 2048 02:15:58 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000009b0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000030004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fe00000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1691.056523][T16501] EXT4-fs (loop2): bad geometry: first data block 1114112 is beyond end of filesystem (512) [ 1691.083062][T16510] loop5: detected capacity change from 0 to 2048 [ 1691.092002][T16511] loop3: detected capacity change from 0 to 2048 02:15:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000040004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1691.100232][T16510] EXT4-fs (loop5): bad geometry: first data block 2600468480 is beyond end of filesystem (512) [ 1691.114479][T16511] EXT4-fs (loop3): bad geometry: first data block 65024 is beyond end of filesystem (512) [ 1691.125902][T16501] loop2: detected capacity change from 0 to 2048 [ 1691.133398][T16501] EXT4-fs (loop2): bad geometry: first data block 1114112 is beyond end of filesystem (512) [ 1691.166085][T16510] loop5: detected capacity change from 0 to 2048 [ 1691.173260][T16510] EXT4-fs (loop5): bad geometry: first data block 2600468480 is beyond end of filesystem (512) [ 1691.175116][T16511] loop3: detected capacity change from 0 to 2048 [ 1691.203966][T16511] EXT4-fs (loop3): bad geometry: first data block 65024 is beyond end of filesystem (512) [ 1691.209804][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.221912][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1691.238879][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.246940][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1691.258641][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.266631][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1691.305666][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.313663][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1691.325114][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.333082][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1691.437004][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.445004][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1691.461657][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.469645][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1691.481507][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.489488][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:58 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000012000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000009c0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000402000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000050004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1691.528987][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.536991][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1691.548459][T16471] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.556464][T16471] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:15:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000009d0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000060004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1691.620664][T16542] loop5: detected capacity change from 0 to 2048 [ 1691.630540][T16542] EXT4-fs (loop5): bad geometry: first data block 2617245696 is beyond end of filesystem (512) [ 1691.642674][T16543] loop3: detected capacity change from 0 to 2048 [ 1691.667351][T16547] loop2: detected capacity change from 0 to 2048 [ 1691.670500][T16543] EXT4-fs (loop3): bad geometry: first data block 132096 is beyond end of filesystem (512) [ 1691.705372][T16547] EXT4-fs (loop2): bad geometry: first data block 1179648 is beyond end of filesystem (512) [ 1691.728159][T16543] loop3: detected capacity change from 0 to 2048 [ 1691.735545][T16543] EXT4-fs (loop3): bad geometry: first data block 132096 is beyond end of filesystem (512) [ 1691.771424][T16547] loop2: detected capacity change from 0 to 2048 [ 1691.787191][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.795184][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1691.795314][T16547] EXT4-fs (loop2): bad geometry: first data block 1179648 is beyond end of filesystem (512) [ 1691.821717][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.829749][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1691.841280][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.849267][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1691.888640][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.896624][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1691.908038][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1691.916018][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1691.949190][T16561] loop5: detected capacity change from 0 to 2048 [ 1691.978969][T16561] EXT4-fs (loop5): bad geometry: first data block 2634022912 is beyond end of filesystem (512) [ 1692.015509][T16561] loop5: detected capacity change from 0 to 2048 [ 1692.020678][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.022497][T16561] EXT4-fs (loop5): bad geometry: first data block 2634022912 is beyond end of filesystem (512) [ 1692.029803][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1692.056535][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.064517][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1692.076325][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.084400][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:15:59 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x0, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000070004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000017000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000009e0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1692.124217][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.132196][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1692.143721][T16505] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.151776][T16505] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1692.209918][T16576] loop3: detected capacity change from 0 to 2048 [ 1692.218204][T16576] EXT4-fs (loop3): bad geometry: first data block 196608 is beyond end of filesystem (512) [ 1692.229729][T16581] loop2: detected capacity change from 0 to 2048 [ 1692.233334][T16582] loop5: detected capacity change from 0 to 2048 [ 1692.243993][T16582] EXT4-fs (loop5): bad geometry: first data block 2650800128 is beyond end of filesystem (512) [ 1692.254795][T16581] EXT4-fs (loop2): bad geometry: first data block 1507328 is beyond end of filesystem (512) [ 1692.285380][T16576] loop3: detected capacity change from 0 to 2048 [ 1692.292404][T16576] EXT4-fs (loop3): bad geometry: first data block 196608 is beyond end of filesystem (512) [ 1692.292996][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.310483][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1692.322701][T16581] loop2: detected capacity change from 0 to 2048 [ 1692.323324][T16582] loop5: detected capacity change from 0 to 2048 [ 1692.335578][T16581] EXT4-fs (loop2): bad geometry: first data block 1507328 is beyond end of filesystem (512) [ 1692.342158][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.353614][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1692.365148][T16582] EXT4-fs (loop5): bad geometry: first data block 2650800128 is beyond end of filesystem (512) [ 1692.375091][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.383462][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1692.426160][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.434197][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1692.445953][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.453953][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1692.537987][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.545989][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1692.561990][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.569975][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1692.581353][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.589413][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1692.628032][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:15:59 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:15:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000080004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:15:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000018000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c103000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:15:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000009f0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1692.636004][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1692.647453][T16537] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.655452][T16537] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1692.744047][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.752059][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1692.768266][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.776252][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1692.787703][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.795692][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1692.833085][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000180004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1692.841085][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1692.852688][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1692.860703][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1692.908967][T16608] loop3: detected capacity change from 0 to 2048 [ 1692.920170][T16609] loop5: detected capacity change from 0 to 2048 [ 1692.928170][T16610] loop2: detected capacity change from 0 to 2048 [ 1692.946834][T16608] EXT4-fs (loop3): bad geometry: first data block 246016 is beyond end of filesystem (512) [ 1692.960682][T16609] EXT4-fs (loop5): bad geometry: first data block 2667577344 is beyond end of filesystem (512) [ 1692.975566][T16610] EXT4-fs (loop2): bad geometry: first data block 1572864 is beyond end of filesystem (512) [ 1693.001973][T16608] loop3: detected capacity change from 0 to 2048 [ 1693.016484][T16608] EXT4-fs (loop3): bad geometry: first data block 246016 is beyond end of filesystem (512) [ 1693.027515][T16609] loop5: detected capacity change from 0 to 2048 [ 1693.032878][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.034077][T16610] loop2: detected capacity change from 0 to 2048 02:16:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000a00100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1693.041840][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1693.059560][T16609] EXT4-fs (loop5): bad geometry: first data block 2667577344 is beyond end of filesystem (512) [ 1693.066702][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.077993][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1693.090931][T16610] EXT4-fs (loop2): bad geometry: first data block 1572864 is beyond end of filesystem (512) [ 1693.110992][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.118988][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:00 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x0, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c203000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000001c0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000019000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1693.158515][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.166536][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1693.178486][T16574] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.186499][T16574] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1693.242433][T16629] loop5: detected capacity change from 0 to 2048 [ 1693.250459][T16629] EXT4-fs (loop5): bad geometry: first data block 2684354560 is beyond end of filesystem (512) [ 1693.295326][T16629] loop5: detected capacity change from 0 to 2048 [ 1693.302342][T16629] EXT4-fs (loop5): bad geometry: first data block 2684354560 is beyond end of filesystem (512) [ 1693.303824][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.320673][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1693.336830][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.344804][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1693.356287][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.364250][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000a10100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1693.402502][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.410505][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1693.422059][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.430065][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1693.494910][T16645] loop3: detected capacity change from 0 to 2048 [ 1693.496632][T16644] loop2: detected capacity change from 0 to 2048 [ 1693.504197][T16646] loop5: detected capacity change from 0 to 2048 [ 1693.512216][T16644] EXT4-fs (loop2): bad geometry: first data block 1638400 is beyond end of filesystem (512) [ 1693.526020][T16646] EXT4-fs (loop5): bad geometry: first data block 2701131776 is beyond end of filesystem (512) [ 1693.536813][T16645] EXT4-fs (loop3): bad geometry: first data block 246272 is beyond end of filesystem (512) [ 1693.555726][T16646] loop5: detected capacity change from 0 to 2048 [ 1693.563049][T16646] EXT4-fs (loop5): bad geometry: first data block 2701131776 is beyond end of filesystem (512) [ 1693.575550][T16645] loop3: detected capacity change from 0 to 2048 [ 1693.577308][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.582366][T16644] loop2: detected capacity change from 0 to 2048 [ 1693.589947][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1693.608203][T16645] EXT4-fs (loop3): bad geometry: first data block 246272 is beyond end of filesystem (512) [ 1693.615069][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.618906][T16644] EXT4-fs (loop2): bad geometry: first data block 1638400 is beyond end of filesystem (512) [ 1693.626251][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1693.626820][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.655617][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:01 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000b20100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000260004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c303000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001a000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1693.704500][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.712548][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1693.724128][T16602] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.732178][T16602] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1693.855030][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.863008][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1693.879099][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.887113][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1693.898526][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.906552][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1693.944369][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.952333][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1693.963818][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1693.971809][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000fe0004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1694.016010][T16672] loop3: detected capacity change from 0 to 2048 [ 1694.022814][T16674] loop5: detected capacity change from 0 to 2048 [ 1694.025005][T16673] loop2: detected capacity change from 0 to 2048 [ 1694.037846][T16672] EXT4-fs (loop3): bad geometry: first data block 246528 is beyond end of filesystem (512) [ 1694.048873][T16674] EXT4-fs (loop5): bad geometry: first data block 2986344448 is beyond end of filesystem (512) [ 1694.060736][T16673] EXT4-fs (loop2): bad geometry: first data block 1703936 is beyond end of filesystem (512) [ 1694.086807][T16674] loop5: detected capacity change from 0 to 2048 [ 1694.093490][T16672] loop3: detected capacity change from 0 to 2048 [ 1694.101772][T16674] EXT4-fs (loop5): bad geometry: first data block 2986344448 is beyond end of filesystem (512) [ 1694.108313][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.113945][T16673] loop2: detected capacity change from 0 to 2048 [ 1694.120098][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1694.126436][T16672] EXT4-fs (loop3): bad geometry: first data block 246528 is beyond end of filesystem (512) [ 1694.147122][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.148641][T16673] EXT4-fs (loop2): bad geometry: first data block 1703936 is beyond end of filesystem (512) [ 1694.155769][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1694.177326][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c403000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1694.185299][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1694.232927][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.240911][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1694.252983][T16636] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.260970][T16636] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:01 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x0, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001b000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003bc0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000040204000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1694.297850][T16694] loop3: detected capacity change from 0 to 2048 [ 1694.318981][T16694] EXT4-fs (loop3): bad geometry: first data block 246784 is beyond end of filesystem (512) [ 1694.365997][T16694] loop3: detected capacity change from 0 to 2048 [ 1694.373231][T16694] EXT4-fs (loop3): bad geometry: first data block 246784 is beyond end of filesystem (512) [ 1694.377122][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.391180][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1694.407283][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.415255][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1694.426777][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.434815][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c503000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1694.474172][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.482180][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1694.493686][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.501700][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1694.573447][T16709] loop5: detected capacity change from 0 to 2048 [ 1694.575345][T16713] loop2: detected capacity change from 0 to 2048 [ 1694.585671][T16712] loop3: detected capacity change from 0 to 2048 [ 1694.592604][T16713] EXT4-fs (loop2): bad geometry: first data block 1769472 is beyond end of filesystem (512) [ 1694.603014][T16709] EXT4-fs (loop5): bad geometry: first data block 3154313216 is beyond end of filesystem (512) [ 1694.624127][T16712] EXT4-fs (loop3): bad geometry: first data block 247040 is beyond end of filesystem (512) [ 1694.667338][T16709] loop5: detected capacity change from 0 to 2048 [ 1694.675388][T16713] loop2: detected capacity change from 0 to 2048 [ 1694.682052][T16709] EXT4-fs (loop5): bad geometry: first data block 3154313216 is beyond end of filesystem (512) [ 1694.697309][T16713] EXT4-fs (loop2): bad geometry: first data block 1769472 is beyond end of filesystem (512) [ 1694.698719][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.715392][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1694.731724][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.739736][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1694.751530][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.759660][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1694.800294][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.808297][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1694.820155][T16671] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.828143][T16671] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:02 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x0, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000304000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000206463bc0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c603000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001c000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1694.949505][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.957546][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1694.973638][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1694.981689][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1694.993202][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.001188][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1695.037922][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.045895][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1695.057392][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.065391][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000020404000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1695.102202][T16736] loop5: detected capacity change from 0 to 2048 [ 1695.106425][T16737] loop2: detected capacity change from 0 to 2048 [ 1695.115945][T16738] loop3: detected capacity change from 0 to 2048 [ 1695.122945][T16737] EXT4-fs (loop2): bad geometry: first data block 1835008 is beyond end of filesystem (512) [ 1695.134537][T16736] EXT4-fs (loop5): bad geometry: first data block 3160630304 is beyond end of filesystem (512) [ 1695.145215][T16738] EXT4-fs (loop3): bad geometry: first data block 247296 is beyond end of filesystem (512) [ 1695.165265][T16737] loop2: detected capacity change from 0 to 2048 [ 1695.172056][T16737] EXT4-fs (loop2): bad geometry: first data block 1835008 is beyond end of filesystem (512) [ 1695.193228][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.201223][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1695.214805][T16736] loop5: detected capacity change from 0 to 2048 [ 1695.218343][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.222174][T16736] EXT4-fs (loop5): bad geometry: first data block 3160630304 is beyond end of filesystem (512) [ 1695.229110][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:16:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001d000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1695.251849][T16738] loop3: detected capacity change from 0 to 2048 [ 1695.254273][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.259613][T16738] EXT4-fs (loop3): bad geometry: first data block 247296 is beyond end of filesystem (512) [ 1695.266176][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:02 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x0, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003bd0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c703000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1695.321537][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.329557][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1695.341908][T16708] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.349909][T16708] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000060404000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1695.407421][T16758] loop2: detected capacity change from 0 to 2048 [ 1695.410529][T16762] loop5: detected capacity change from 0 to 2048 [ 1695.423796][T16762] EXT4-fs (loop5): bad geometry: first data block 3171090432 is beyond end of filesystem (512) [ 1695.424819][T16763] loop3: detected capacity change from 0 to 2048 [ 1695.450084][T16758] EXT4-fs (loop2): bad geometry: first data block 1900544 is beyond end of filesystem (512) [ 1695.460731][T16763] EXT4-fs (loop3): bad geometry: first data block 247552 is beyond end of filesystem (512) [ 1695.472379][T16762] loop5: detected capacity change from 0 to 2048 [ 1695.479784][T16762] EXT4-fs (loop5): bad geometry: first data block 3171090432 is beyond end of filesystem (512) 02:16:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003be0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1695.505258][T16758] loop2: detected capacity change from 0 to 2048 [ 1695.513323][T16758] EXT4-fs (loop2): bad geometry: first data block 1900544 is beyond end of filesystem (512) [ 1695.525985][T16763] loop3: detected capacity change from 0 to 2048 [ 1695.536290][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.544314][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1695.554779][T16763] EXT4-fs (loop3): bad geometry: first data block 247552 is beyond end of filesystem (512) [ 1695.561829][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.573526][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1695.585043][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.593007][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1695.635901][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.643943][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1695.656251][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.664238][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1695.704993][T16784] loop5: detected capacity change from 0 to 2048 [ 1695.715113][T16784] EXT4-fs (loop5): bad geometry: first data block 3187867648 is beyond end of filesystem (512) [ 1695.765309][T16784] loop5: detected capacity change from 0 to 2048 [ 1695.767254][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.772538][T16784] EXT4-fs (loop5): bad geometry: first data block 3187867648 is beyond end of filesystem (512) [ 1695.779619][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1695.786398][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.809307][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1695.821138][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.829143][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:03 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x0, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001e000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000c803000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000800404000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003bf0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1695.870190][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.878348][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1695.890198][T16734] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1695.898186][T16734] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1696.008672][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.016673][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1696.032685][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.040712][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1696.052098][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.060069][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1696.096977][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.104962][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1696.116593][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.124602][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000504000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1696.187611][T16799] loop2: detected capacity change from 0 to 2048 [ 1696.200060][T16802] loop3: detected capacity change from 0 to 2048 [ 1696.209111][T16799] EXT4-fs (loop2): bad geometry: first data block 1966080 is beyond end of filesystem (512) [ 1696.210824][T16800] loop5: detected capacity change from 0 to 2048 [ 1696.230236][T16802] EXT4-fs (loop3): bad geometry: first data block 247808 is beyond end of filesystem (512) [ 1696.242431][T16800] EXT4-fs (loop5): bad geometry: first data block 3204644864 is beyond end of filesystem (512) [ 1696.255057][T16799] loop2: detected capacity change from 0 to 2048 [ 1696.261835][T16799] EXT4-fs (loop2): bad geometry: first data block 1966080 is beyond end of filesystem (512) [ 1696.278901][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.286891][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1696.303454][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.306002][T16802] loop3: detected capacity change from 0 to 2048 [ 1696.311480][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1696.318347][T16800] loop5: detected capacity change from 0 to 2048 02:16:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001f000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1696.337357][T16802] EXT4-fs (loop3): bad geometry: first data block 247808 is beyond end of filesystem (512) [ 1696.347902][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.355913][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1696.364129][T16800] EXT4-fs (loop5): bad geometry: first data block 3204644864 is beyond end of filesystem (512) 02:16:03 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x0, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000000200000000050000002f0504000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fa03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000000edc00100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1696.400630][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.408632][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1696.420204][T16757] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.428221][T16757] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1696.483922][T16821] loop2: detected capacity change from 0 to 2048 [ 1696.492384][T16821] EXT4-fs (loop2): bad geometry: first data block 2031616 is beyond end of filesystem (512) [ 1696.535256][T16821] loop2: detected capacity change from 0 to 2048 [ 1696.536283][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.542094][T16821] EXT4-fs (loop2): bad geometry: first data block 2031616 is beyond end of filesystem (512) [ 1696.549602][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1696.575862][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000020000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1696.583823][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1696.595338][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.603319][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1696.641229][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.649217][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1696.660612][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.668630][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1696.734388][T16835] loop3: detected capacity change from 0 to 2048 [ 1696.737062][T16836] loop5: detected capacity change from 0 to 2048 [ 1696.751600][T16839] loop2: detected capacity change from 0 to 2048 [ 1696.771132][T16836] EXT4-fs (loop5): bad geometry: first data block 3236757504 is beyond end of filesystem (512) [ 1696.788540][T16835] EXT4-fs (loop3): bad geometry: first data block 260608 is beyond end of filesystem (512) [ 1696.807542][T16839] EXT4-fs (loop2): bad geometry: first data block 2097152 is beyond end of filesystem (512) [ 1696.835627][T16839] loop2: detected capacity change from 0 to 2048 [ 1696.842590][T16835] loop3: detected capacity change from 0 to 2048 [ 1696.843062][T16839] EXT4-fs (loop2): bad geometry: first data block 2097152 is beyond end of filesystem (512) [ 1696.857562][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.867116][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1696.879104][T16835] EXT4-fs (loop3): bad geometry: first data block 260608 is beyond end of filesystem (512) [ 1696.883694][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.897074][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1696.908531][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.916535][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:04 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x0, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000001020000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003c10100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fb03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1696.964936][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.973017][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1696.984548][T16796] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1696.992510][T16796] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1697.067865][T16860] loop3: detected capacity change from 0 to 2048 [ 1697.077921][T16860] EXT4-fs (loop3): bad geometry: first data block 260864 is beyond end of filesystem (512) [ 1697.086867][T16863] loop2: detected capacity change from 0 to 2048 [ 1697.095907][T16865] loop5: detected capacity change from 0 to 2048 02:16:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000040604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1697.125951][T16863] EXT4-fs (loop2): bad geometry: first data block 2101248 is beyond end of filesystem (512) [ 1697.140048][T16860] loop3: detected capacity change from 0 to 2048 [ 1697.147355][T16865] EXT4-fs (loop5): bad geometry: first data block 3238199296 is beyond end of filesystem (512) [ 1697.158592][T16860] EXT4-fs (loop3): bad geometry: first data block 260864 is beyond end of filesystem (512) [ 1697.193603][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.201599][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1697.218340][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.226363][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:16:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fc03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1697.237870][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.240347][T16865] loop5: detected capacity change from 0 to 2048 [ 1697.245939][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1697.253081][T16863] loop2: detected capacity change from 0 to 2048 [ 1697.270792][T16863] EXT4-fs (loop2): bad geometry: first data block 2101248 is beyond end of filesystem (512) [ 1697.282066][T16865] EXT4-fs (loop5): bad geometry: first data block 3238199296 is beyond end of filesystem (512) [ 1697.323010][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.331010][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1697.342662][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.350655][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1697.387708][T16887] loop3: detected capacity change from 0 to 2048 [ 1697.396259][T16887] EXT4-fs (loop3): bad geometry: first data block 261120 is beyond end of filesystem (512) [ 1697.461440][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.469479][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1697.486308][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.494281][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1697.505762][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.513721][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:04 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x0, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000022000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000704000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000c80100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fd03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1697.552432][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.560406][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1697.571908][T16834] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.579944][T16834] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1697.665399][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.673401][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1697.689422][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.697525][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1697.708895][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.716868][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1697.755389][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.763353][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1697.774736][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.782756][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1697.839646][T16900] loop2: detected capacity change from 0 to 2048 [ 1697.846593][T16902] loop3: detected capacity change from 0 to 2048 [ 1697.848911][T16901] loop5: detected capacity change from 0 to 2048 [ 1697.859498][T16900] EXT4-fs (loop2): bad geometry: first data block 2228224 is beyond end of filesystem (512) [ 1697.870390][T16902] EXT4-fs (loop3): bad geometry: first data block 261376 is beyond end of filesystem (512) [ 1697.892806][T16901] EXT4-fs (loop5): bad geometry: first data block 3355443200 is beyond end of filesystem (512) [ 1697.933087][T16901] loop5: detected capacity change from 0 to 2048 [ 1697.939897][T16901] EXT4-fs (loop5): bad geometry: first data block 3355443200 is beyond end of filesystem (512) [ 1697.951932][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.959965][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1697.976570][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1697.984544][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1697.996060][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.004047][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:05 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0x0, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000c00904000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000025000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fe03000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d20100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1698.042221][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.050255][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1698.061653][T16855] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.069657][T16855] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1698.190992][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.198994][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1698.215546][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.223538][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1698.235071][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.243039][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1698.280996][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.289041][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1698.300466][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.308454][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000001804000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1698.350580][T16931] loop3: detected capacity change from 0 to 2048 [ 1698.357715][T16932] loop2: detected capacity change from 0 to 2048 [ 1698.358862][T16934] loop5: detected capacity change from 0 to 2048 [ 1698.373966][T16934] EXT4-fs (loop5): bad geometry: first data block 3523411968 is beyond end of filesystem (512) [ 1698.374310][T16931] EXT4-fs (loop3): bad geometry: first data block 261632 is beyond end of filesystem (512) [ 1698.385004][T16932] EXT4-fs (loop2): bad geometry: first data block 2424832 is beyond end of filesystem (512) [ 1698.414837][T16934] loop5: detected capacity change from 0 to 2048 [ 1698.421773][T16934] EXT4-fs (loop5): bad geometry: first data block 3523411968 is beyond end of filesystem (512) [ 1698.436353][T16932] loop2: detected capacity change from 0 to 2048 [ 1698.438783][T16931] loop3: detected capacity change from 0 to 2048 [ 1698.449606][T16932] EXT4-fs (loop2): bad geometry: first data block 2424832 is beyond end of filesystem (512) [ 1698.460889][T16931] EXT4-fs (loop3): bad geometry: first data block 261632 is beyond end of filesystem (512) [ 1698.483814][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000002e000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1698.491840][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1698.508934][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.516920][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1698.529318][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.537311][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:05 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x0, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d30100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000204000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000001c04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1698.585451][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.593606][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1698.605318][T16898] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.613377][T16898] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1698.669462][T16955] loop2: detected capacity change from 0 to 2048 [ 1698.698498][T16955] EXT4-fs (loop2): bad geometry: first data block 3014656 is beyond end of filesystem (512) [ 1698.703271][T16962] loop3: detected capacity change from 0 to 2048 [ 1698.718202][T16964] loop5: detected capacity change from 0 to 2048 02:16:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000002004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1698.747666][T16964] EXT4-fs (loop5): bad geometry: first data block 3540189184 is beyond end of filesystem (512) [ 1698.761309][T16962] EXT4-fs (loop3): bad geometry: first data block 262656 is beyond end of filesystem (512) [ 1698.775798][T16955] loop2: detected capacity change from 0 to 2048 [ 1698.782712][T16955] EXT4-fs (loop2): bad geometry: first data block 3014656 is beyond end of filesystem (512) [ 1698.799372][T16962] loop3: detected capacity change from 0 to 2048 [ 1698.807518][T16964] loop5: detected capacity change from 0 to 2048 [ 1698.815189][T16964] EXT4-fs (loop5): bad geometry: first data block 3540189184 is beyond end of filesystem (512) [ 1698.826969][T16962] EXT4-fs (loop3): bad geometry: first data block 262656 is beyond end of filesystem (512) [ 1698.852676][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.860655][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1698.877047][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.885034][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1698.896686][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.904701][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1698.947171][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.955158][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1698.966944][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1698.974957][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1699.098010][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.106015][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1699.122590][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.130590][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1699.142096][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.150297][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:06 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0x0, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000032000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000604000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d40100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000002604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1699.189707][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.197748][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1699.209218][T16926] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.217228][T16926] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1699.305971][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.314019][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1699.330301][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.338304][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1699.349849][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.357910][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1699.395079][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.403067][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1699.414616][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.422582][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000052f04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1699.466630][T16995] loop3: detected capacity change from 0 to 2048 [ 1699.475566][T16994] loop2: detected capacity change from 0 to 2048 [ 1699.482135][T16995] EXT4-fs (loop3): bad geometry: first data block 263680 is beyond end of filesystem (512) [ 1699.488305][T16997] loop5: detected capacity change from 0 to 2048 [ 1699.501667][T16994] EXT4-fs (loop2): bad geometry: first data block 3276800 is beyond end of filesystem (512) [ 1699.512441][T16997] EXT4-fs (loop5): bad geometry: first data block 3556966400 is beyond end of filesystem (512) [ 1699.536322][T16995] loop3: detected capacity change from 0 to 2048 [ 1699.543320][T16995] EXT4-fs (loop3): bad geometry: first data block 263680 is beyond end of filesystem (512) [ 1699.550861][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.555559][T16994] loop2: detected capacity change from 0 to 2048 [ 1699.561326][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1699.568592][T16994] EXT4-fs (loop2): bad geometry: first data block 3276800 is beyond end of filesystem (512) [ 1699.585883][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.589516][T16997] loop5: detected capacity change from 0 to 2048 [ 1699.596968][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd 02:16:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000005000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1699.604830][T16997] EXT4-fs (loop5): bad geometry: first data block 3556966400 is beyond end of filesystem (512) [ 1699.615773][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.632858][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1699.673522][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.681528][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1699.701213][T16961] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.709221][T16961] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:07 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x0, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000003f000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d50100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000003f04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1699.783451][T17018] loop3: detected capacity change from 0 to 2048 [ 1699.792214][T17018] EXT4-fs (loop3): bad geometry: first data block 327680 is beyond end of filesystem (512) [ 1699.825754][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.833720][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1699.851129][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.859116][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1699.871360][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.873186][T17018] loop3: detected capacity change from 0 to 2048 [ 1699.879360][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1699.890609][T17018] EXT4-fs (loop3): bad geometry: first data block 327680 is beyond end of filesystem (512) 02:16:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000006000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1699.925322][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.933301][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1699.944872][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1699.952876][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1700.009184][T17031] loop5: detected capacity change from 0 to 2048 [ 1700.009264][T17032] loop2: detected capacity change from 0 to 2048 [ 1700.041363][T17032] EXT4-fs (loop2): bad geometry: first data block 4128768 is beyond end of filesystem (512) [ 1700.051715][T17031] EXT4-fs (loop5): bad geometry: first data block 3573743616 is beyond end of filesystem (512) [ 1700.096768][T17031] loop5: detected capacity change from 0 to 2048 [ 1700.096768][T17032] loop2: detected capacity change from 0 to 2048 [ 1700.110021][T17031] EXT4-fs (loop5): bad geometry: first data block 3573743616 is beyond end of filesystem (512) [ 1700.117802][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.128317][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1700.140289][T17032] EXT4-fs (loop2): bad geometry: first data block 4128768 is beyond end of filesystem (512) [ 1700.150520][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.158513][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1700.170430][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.178451][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:07 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0x0, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000004004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000040000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d60100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1700.221731][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.229724][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1700.241275][T16990] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.249293][T16990] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000048004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1700.342892][T17053] loop2: detected capacity change from 0 to 2048 [ 1700.349590][T17056] loop5: detected capacity change from 0 to 2048 [ 1700.368677][T17057] loop3: detected capacity change from 0 to 2048 [ 1700.378970][T17056] EXT4-fs (loop5): bad geometry: first data block 3590520832 is beyond end of filesystem (512) [ 1700.389978][T17053] EXT4-fs (loop2): bad geometry: first data block 4194304 is beyond end of filesystem (512) [ 1700.404165][T17057] EXT4-fs (loop3): bad geometry: first data block 393216 is beyond end of filesystem (512) [ 1700.415472][T17053] loop2: detected capacity change from 0 to 2048 [ 1700.422632][T17053] EXT4-fs (loop2): bad geometry: first data block 4194304 is beyond end of filesystem (512) [ 1700.422669][T17056] loop5: detected capacity change from 0 to 2048 [ 1700.441099][T17056] EXT4-fs (loop5): bad geometry: first data block 3590520832 is beyond end of filesystem (512) [ 1700.463491][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.471488][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:16:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000042000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1700.490690][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.498850][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1700.505726][T17057] loop3: detected capacity change from 0 to 2048 [ 1700.512038][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.524446][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d70100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1700.536522][T17057] EXT4-fs (loop3): bad geometry: first data block 393216 is beyond end of filesystem (512) [ 1700.568288][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.576258][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1700.588328][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.596329][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1700.640753][T17078] loop5: detected capacity change from 0 to 2048 [ 1700.651609][T17078] EXT4-fs (loop5): bad geometry: first data block 3607298048 is beyond end of filesystem (512) [ 1700.656204][T17081] loop2: detected capacity change from 0 to 2048 [ 1700.677618][T17081] EXT4-fs (loop2): bad geometry: first data block 4325376 is beyond end of filesystem (512) [ 1700.695108][T17078] loop5: detected capacity change from 0 to 2048 [ 1700.702005][T17078] EXT4-fs (loop5): bad geometry: first data block 3607298048 is beyond end of filesystem (512) [ 1700.714856][T17081] loop2: detected capacity change from 0 to 2048 [ 1700.721860][T17081] EXT4-fs (loop2): bad geometry: first data block 4325376 is beyond end of filesystem (512) [ 1700.727864][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.739937][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1700.756079][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.764077][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1700.783702][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.791709][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1700.831046][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.839181][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1700.850706][T17025] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1700.858869][T17025] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:08 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x0, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000406000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500000009c004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d80100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000048000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1700.936711][T17097] loop3: detected capacity change from 0 to 2048 [ 1700.944602][T17098] loop2: detected capacity change from 0 to 2048 [ 1700.953021][T17100] loop5: detected capacity change from 0 to 2048 [ 1700.972599][T17097] EXT4-fs (loop3): bad geometry: first data block 394240 is beyond end of filesystem (512) [ 1700.988273][T17098] EXT4-fs (loop2): bad geometry: first data block 4718592 is beyond end of filesystem (512) [ 1700.988524][T17100] EXT4-fs (loop5): bad geometry: first data block 3624075264 is beyond end of filesystem (512) [ 1701.036934][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.044999][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1701.059479][T17098] loop2: detected capacity change from 0 to 2048 [ 1701.060051][T17100] loop5: detected capacity change from 0 to 2048 [ 1701.066087][T17097] loop3: detected capacity change from 0 to 2048 [ 1701.078989][T17100] EXT4-fs (loop5): bad geometry: first data block 3624075264 is beyond end of filesystem (512) [ 1701.089783][T17098] EXT4-fs (loop2): bad geometry: first data block 4718592 is beyond end of filesystem (512) [ 1701.090106][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.100395][T17097] EXT4-fs (loop3): bad geometry: first data block 394240 is beyond end of filesystem (512) [ 1701.107870][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1701.130347][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.138357][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1701.190361][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.198388][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1701.209915][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.217946][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1701.345493][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.353522][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1701.372670][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.380669][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1701.392453][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.400438][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:08 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000fffe04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000004c000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000007000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000003d90100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1701.441448][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.449453][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1701.460824][T17052] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.468866][T17052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1701.553708][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.561698][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1701.578377][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.586351][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1701.597819][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.605808][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1701.643763][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.651800][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1701.663304][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.671549][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000feff04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1701.713237][T17136] loop2: detected capacity change from 0 to 2048 [ 1701.716480][T17139] loop5: detected capacity change from 0 to 2048 [ 1701.726267][T17137] loop3: detected capacity change from 0 to 2048 [ 1701.732768][T17136] EXT4-fs (loop2): bad geometry: first data block 4980736 is beyond end of filesystem (512) [ 1701.745708][T17139] EXT4-fs (loop5): bad geometry: first data block 3640852480 is beyond end of filesystem (512) [ 1701.756525][T17137] EXT4-fs (loop3): bad geometry: first data block 458752 is beyond end of filesystem (512) [ 1701.795271][T17139] loop5: detected capacity change from 0 to 2048 [ 1701.795920][T17136] loop2: detected capacity change from 0 to 2048 [ 1701.809495][T17137] loop3: detected capacity change from 0 to 2048 [ 1701.810461][T17139] EXT4-fs (loop5): bad geometry: first data block 3640852480 is beyond end of filesystem (512) [ 1701.827123][T17137] EXT4-fs (loop3): bad geometry: first data block 458752 is beyond end of filesystem (512) [ 1701.832529][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.837384][T17136] EXT4-fs (loop2): bad geometry: first data block 4980736 is beyond end of filesystem (512) [ 1701.845110][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1701.851402][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.874544][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1701.886317][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000fc07000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1701.894397][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1701.939854][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.947972][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1701.959791][T17117] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1701.967786][T17117] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000060000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000ffffffda0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:09 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000010000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1702.020299][T17162] loop3: detected capacity change from 0 to 2048 [ 1702.031160][T17162] EXT4-fs (loop3): bad geometry: first data block 523264 is beyond end of filesystem (512) [ 1702.074666][T17162] loop3: detected capacity change from 0 to 2048 [ 1702.081807][T17162] EXT4-fs (loop3): bad geometry: first data block 523264 is beyond end of filesystem (512) [ 1702.094160][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.102169][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:16:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000009000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1702.118702][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.126720][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1702.146337][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.154630][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1702.194228][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.202206][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1702.214035][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.222002][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1702.276192][T17174] loop2: detected capacity change from 0 to 2048 [ 1702.286126][T17175] loop5: detected capacity change from 0 to 2048 [ 1702.303392][T17176] loop3: detected capacity change from 0 to 2048 [ 1702.310307][T17174] EXT4-fs (loop2): bad geometry: first data block 6291456 is beyond end of filesystem (512) [ 1702.310387][T17175] EXT4-fs (loop5): bad geometry: first data block 3674210303 is beyond end of filesystem (512) [ 1702.334645][T17176] EXT4-fs (loop3): bad geometry: first data block 589824 is beyond end of filesystem (512) [ 1702.364651][T17174] loop2: detected capacity change from 0 to 2048 [ 1702.372007][T17174] EXT4-fs (loop2): bad geometry: first data block 6291456 is beyond end of filesystem (512) [ 1702.386338][T17175] loop5: detected capacity change from 0 to 2048 [ 1702.386433][T17176] loop3: detected capacity change from 0 to 2048 [ 1702.398083][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.406989][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1702.407039][T17176] EXT4-fs (loop3): bad geometry: first data block 589824 is beyond end of filesystem (512) [ 1702.429110][T17175] EXT4-fs (loop5): bad geometry: first data block 3674210303 is beyond end of filesystem (512) [ 1702.435195][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.447508][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1702.459898][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.467892][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1702.524672][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.532655][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1702.544133][T17135] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.552096][T17135] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:09 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000003000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000068000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000ffffffe20100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000a000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1702.674826][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.682845][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1702.699451][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.707459][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1702.718936][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.726957][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1702.766387][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.774371][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1702.785935][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.793999][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000204000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1702.836196][T17208] loop2: detected capacity change from 0 to 2048 [ 1702.844012][T17209] loop3: detected capacity change from 0 to 2048 [ 1702.849649][T17210] loop5: detected capacity change from 0 to 2048 [ 1702.856754][T17209] EXT4-fs (loop3): bad geometry: first data block 655360 is beyond end of filesystem (512) [ 1702.870835][T17210] EXT4-fs (loop5): bad geometry: first data block 3808428031 is beyond end of filesystem (512) [ 1702.872019][T17208] EXT4-fs (loop2): bad geometry: first data block 6815744 is beyond end of filesystem (512) [ 1702.934448][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.942437][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1702.957728][T17208] loop2: detected capacity change from 0 to 2048 [ 1702.957769][T17210] loop5: detected capacity change from 0 to 2048 [ 1702.958218][ C1] ================================================================== [ 1702.958228][ C1] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 1702.958233][ C1] [ 1702.958238][ C1] write to 0xffffffff841498b9 of 1 bytes by task 17210 on cpu 0: [ 1702.958245][ C1] vsnprintf+0xe8f/0xed0 [ 1702.958249][ C1] vscnprintf+0x29/0x80 [ 1702.958253][ C1] vprintk_store+0x4c1/0x9c0 [ 1702.958266][ C1] vprintk_emit+0xca/0x3d0 [ 1702.958284][ C1] vprintk_default+0x22/0x30 [ 1702.958289][ C1] vprintk+0x15a/0x170 [ 1702.958293][ C1] printk+0x62/0x87 [ 1702.958297][ C1] set_capacity_and_notify+0x15a/0x1c0 02:16:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffff40100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1702.958302][ C1] loop_configure+0xc8e/0xeb0 [ 1702.958306][ C1] lo_ioctl+0x59b/0x1340 [ 1702.958310][ C1] blkdev_ioctl+0x1d0/0x3c0 [ 1702.958314][ C1] block_ioctl+0x6d/0x80 [ 1702.958319][ C1] __se_sys_ioctl+0xcb/0x140 [ 1702.958323][ C1] __x64_sys_ioctl+0x3f/0x50 [ 1702.958327][ C1] do_syscall_64+0x3d/0x90 [ 1702.958332][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.958337][ C1] [ 1702.958341][ C1] read to 0xffffffff841498b8 of 8 bytes by task 17208 on cpu 1: [ 1702.958347][ C1] data_push_tail+0x125/0x460 02:16:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000b000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1702.958373][ C1] data_alloc+0xbc/0x2b0 [ 1702.958377][ C1] prb_reserve+0x8f0/0xbc0 [ 1702.958381][ C1] vprintk_store+0x3e9/0x9c0 [ 1702.958396][ C1] vprintk_emit+0xca/0x3d0 [ 1702.958400][ C1] vprintk_default+0x22/0x30 [ 1702.958404][ C1] vprintk+0x15a/0x170 [ 1702.958408][ C1] printk+0x62/0x87 [ 1702.958421][ C1] set_capacity_and_notify+0x15a/0x1c0 [ 1702.958425][ C1] loop_configure+0xc8e/0xeb0 [ 1702.958430][ C1] lo_ioctl+0x59b/0x1340 [ 1702.958434][ C1] blkdev_ioctl+0x1d0/0x3c0 [ 1702.958438][ C1] block_ioctl+0x6d/0x80 [ 1702.958442][ C1] __se_sys_ioctl+0xcb/0x140 [ 1702.958446][ C1] __x64_sys_ioctl+0x3f/0x50 [ 1702.958450][ C1] do_syscall_64+0x3d/0x90 [ 1702.958455][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.958460][ C1] [ 1702.958464][ C1] value changed: 0x000000010001336f -> 0x000000010001000a [ 1702.958469][ C1] [ 1702.958473][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1702.958479][ C1] CPU: 1 PID: 17208 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 1702.958487][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.958496][ C1] ================================================================== [ 1702.962486][T17209] loop3: detected capacity change from 0 to 2048 [ 1702.974286][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.980632][T17210] EXT4-fs (loop5): bad geometry: first data block 3808428031 is beyond end of filesystem (512) [ 1702.985972][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1702.987688][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1702.989898][T17209] EXT4-fs (loop3): bad geometry: first data block 655360 is beyond end of filesystem (512) [ 1702.996084][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1703.013719][T17208] EXT4-fs (loop2): bad geometry: first data block 6815744 is beyond end of filesystem (512) [ 1703.054872][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000006c000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1703.283476][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1703.295573][T17171] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.303531][T17171] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:10 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000304000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000c000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1703.345775][T17232] loop3: detected capacity change from 0 to 2048 [ 1703.363992][T17236] loop5: detected capacity change from 0 to 2048 [ 1703.375033][T17232] EXT4-fs (loop3): bad geometry: first data block 720896 is beyond end of filesystem (512) [ 1703.385091][T17236] EXT4-fs (loop5): bad geometry: first data block 4110417919 is beyond end of filesystem (512) [ 1703.424835][T17236] loop5: detected capacity change from 0 to 2048 [ 1703.437309][T17236] EXT4-fs (loop5): bad geometry: first data block 4110417919 is beyond end of filesystem (512) [ 1703.465589][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.473592][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1703.490274][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.498252][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1703.509698][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.517743][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1703.565696][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.573781][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1703.585516][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.593568][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1703.644208][T17253] loop2: detected capacity change from 0 to 2048 [ 1703.661518][T17253] EXT4-fs (loop2): bad geometry: first data block 7077888 is beyond end of filesystem (512) [ 1703.662984][T17254] loop3: detected capacity change from 0 to 2048 [ 1703.687012][T17254] EXT4-fs (loop3): bad geometry: first data block 786432 is beyond end of filesystem (512) [ 1703.716962][T17253] loop2: detected capacity change from 0 to 2048 [ 1703.724888][T17253] EXT4-fs (loop2): bad geometry: first data block 7077888 is beyond end of filesystem (512) [ 1703.735659][T17254] loop3: detected capacity change from 0 to 2048 [ 1703.744026][T17254] EXT4-fs (loop3): bad geometry: first data block 786432 is beyond end of filesystem (512) [ 1703.768976][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.776978][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1703.795875][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.803861][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1703.815828][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.823797][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:11 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffff50100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000074000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000404000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000d000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1703.866156][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.874176][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1703.885794][T17203] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1703.893839][T17203] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000504000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1703.986565][T17279] loop2: detected capacity change from 0 to 2048 [ 1703.995565][T17280] loop3: detected capacity change from 0 to 2048 [ 1703.996922][T17281] loop5: detected capacity change from 0 to 2048 [ 1704.012557][T17280] EXT4-fs (loop3): bad geometry: first data block 851968 is beyond end of filesystem (512) [ 1704.025122][T17279] EXT4-fs (loop2): bad geometry: first data block 7602176 is beyond end of filesystem (512) [ 1704.040807][T17281] EXT4-fs (loop5): bad geometry: first data block 4127195135 is beyond end of filesystem (512) [ 1704.074550][T17280] loop3: detected capacity change from 0 to 2048 [ 1704.083875][T17280] EXT4-fs (loop3): bad geometry: first data block 851968 is beyond end of filesystem (512) [ 1704.084937][T17279] loop2: detected capacity change from 0 to 2048 [ 1704.100125][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.108392][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1704.120736][T17279] EXT4-fs (loop2): bad geometry: first data block 7602176 is beyond end of filesystem (512) [ 1704.126336][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000007a000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1704.138763][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1704.150299][T17281] loop5: detected capacity change from 0 to 2048 [ 1704.157287][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.163521][T17281] EXT4-fs (loop5): bad geometry: first data block 4127195135 is beyond end of filesystem (512) [ 1704.165275][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000e000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffff60100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1704.233395][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.241435][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1704.253259][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.261242][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1704.310404][T17304] loop2: detected capacity change from 0 to 2048 [ 1704.326584][T17306] loop5: detected capacity change from 0 to 2048 [ 1704.337454][T17304] EXT4-fs (loop2): bad geometry: first data block 7995392 is beyond end of filesystem (512) [ 1704.347976][T17308] loop3: detected capacity change from 0 to 2048 [ 1704.358391][T17306] EXT4-fs (loop5): bad geometry: first data block 4143972351 is beyond end of filesystem (512) [ 1704.372178][T17308] EXT4-fs (loop3): bad geometry: first data block 917504 is beyond end of filesystem (512) [ 1704.393903][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.401884][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1704.415050][T17304] loop2: detected capacity change from 0 to 2048 [ 1704.419767][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.422312][T17306] loop5: detected capacity change from 0 to 2048 [ 1704.429377][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1704.437251][T17304] EXT4-fs (loop2): bad geometry: first data block 7995392 is beyond end of filesystem (512) [ 1704.448894][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.457829][T17308] loop3: detected capacity change from 0 to 2048 [ 1704.465094][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1704.484109][T17308] EXT4-fs (loop3): bad geometry: first data block 917504 is beyond end of filesystem (512) [ 1704.496896][T17306] EXT4-fs (loop5): bad geometry: first data block 4143972351 is beyond end of filesystem (512) [ 1704.509415][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.517411][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1704.529500][T17248] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.537518][T17248] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:11 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa08, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa08}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003c0000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1704.669900][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.677893][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1704.693888][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.701933][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1704.713719][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.721706][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1704.760179][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.768172][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1704.779721][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.787714][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1704.845714][T17332] loop2: detected capacity change from 0 to 2048 [ 1704.856379][T17332] EXT4-fs (loop2): bad geometry: first data block 12583680 is beyond end of filesystem (512) [ 1704.904770][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.912888][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1704.928279][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.936286][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1704.944041][T17332] loop2: detected capacity change from 0 to 2048 [ 1704.947795][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1704.955661][T17332] EXT4-fs (loop2): bad geometry: first data block 12583680 is beyond end of filesystem (512) [ 1704.961841][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1704.992223][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:12 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x9c0, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffdf90100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000f000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000704000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003c1000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1705.000229][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1705.011737][T17273] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.019797][T17273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000804000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1705.096074][T17347] loop5: detected capacity change from 0 to 2048 [ 1705.108516][T17347] EXT4-fs (loop5): bad geometry: first data block 4194172927 is beyond end of filesystem (512) [ 1705.119443][T17351] loop3: detected capacity change from 0 to 2048 [ 1705.126380][T17352] loop2: detected capacity change from 0 to 2048 [ 1705.136186][T17351] EXT4-fs (loop3): bad geometry: first data block 983040 is beyond end of filesystem (512) [ 1705.149538][T17352] EXT4-fs (loop2): bad geometry: first data block 12649216 is beyond end of filesystem (512) [ 1705.174589][T17347] loop5: detected capacity change from 0 to 2048 [ 1705.182030][T17347] EXT4-fs (loop5): bad geometry: first data block 4194172927 is beyond end of filesystem (512) [ 1705.184313][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.200361][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1705.213751][T17352] loop2: detected capacity change from 0 to 2048 [ 1705.213946][T17351] loop3: detected capacity change from 0 to 2048 [ 1705.227620][T17351] EXT4-fs (loop3): bad geometry: first data block 983040 is beyond end of filesystem (512) [ 1705.229598][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffffb0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000002010000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1705.245583][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1705.254566][T17352] EXT4-fs (loop2): bad geometry: first data block 12649216 is beyond end of filesystem (512) [ 1705.257763][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.275121][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003f4000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1705.320518][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.328515][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1705.340104][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.348135][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1705.411793][T17377] loop3: detected capacity change from 0 to 2048 [ 1705.413832][T17376] loop2: detected capacity change from 0 to 2048 [ 1705.424921][T17377] EXT4-fs (loop3): bad geometry: first data block 1056768 is beyond end of filesystem (512) [ 1705.433756][T17378] loop5: detected capacity change from 0 to 2048 [ 1705.458816][T17376] EXT4-fs (loop2): bad geometry: first data block 15991552 is beyond end of filesystem (512) [ 1705.469257][T17378] EXT4-fs (loop5): bad geometry: first data block 4227858431 is beyond end of filesystem (512) [ 1705.494483][T17377] loop3: detected capacity change from 0 to 2048 [ 1705.501619][T17377] EXT4-fs (loop3): bad geometry: first data block 1056768 is beyond end of filesystem (512) [ 1705.504134][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.519671][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1705.532388][T17376] loop2: detected capacity change from 0 to 2048 [ 1705.539367][T17378] loop5: detected capacity change from 0 to 2048 [ 1705.550897][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.558897][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1705.571379][T17378] EXT4-fs (loop5): bad geometry: first data block 4227858431 is beyond end of filesystem (512) [ 1705.582564][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.590569][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1705.601923][T17376] EXT4-fs (loop2): bad geometry: first data block 15991552 is beyond end of filesystem (512) 02:16:12 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000001804000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000011000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1705.638288][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.646293][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1705.657804][T17330] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.665802][T17330] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1705.788934][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.796932][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1705.812965][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.820959][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1705.832517][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.840503][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1705.878987][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.886969][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1705.898427][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1705.906461][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1705.958539][T17402] loop3: detected capacity change from 0 to 2048 [ 1705.973215][T17402] EXT4-fs (loop3): bad geometry: first data block 1114112 is beyond end of filesystem (512) [ 1706.021843][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.029852][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1706.034314][T17402] loop3: detected capacity change from 0 to 2048 [ 1706.047450][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.055457][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1706.067443][T17402] EXT4-fs (loop3): bad geometry: first data block 1114112 is beyond end of filesystem (512) [ 1706.067494][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.085535][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1706.124940][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.132916][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1706.144669][T17342] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.152697][T17342] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:13 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x9c0, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000007fc0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003f5000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000001c04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000012000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1706.261740][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.269735][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1706.285892][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.293876][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1706.305359][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.313343][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1706.351075][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.359050][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1706.370727][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.378754][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000002604000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1706.429914][T17422] loop3: detected capacity change from 0 to 2048 [ 1706.431371][T17423] loop2: detected capacity change from 0 to 2048 [ 1706.446353][T17424] loop5: detected capacity change from 0 to 2048 [ 1706.456739][T17423] EXT4-fs (loop2): bad geometry: first data block 16057088 is beyond end of filesystem (512) [ 1706.467847][T17422] EXT4-fs (loop3): bad geometry: first data block 1179648 is beyond end of filesystem (512) [ 1706.478772][T17424] EXT4-fs (loop5): bad geometry: first data block 4228317184 is beyond end of filesystem (512) [ 1706.494284][T17423] loop2: detected capacity change from 0 to 2048 [ 1706.501409][T17423] EXT4-fs (loop2): bad geometry: first data block 16057088 is beyond end of filesystem (512) [ 1706.514324][T17422] loop3: detected capacity change from 0 to 2048 02:16:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003f6000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1706.523068][T17422] EXT4-fs (loop3): bad geometry: first data block 1179648 is beyond end of filesystem (512) [ 1706.536061][T17424] loop5: detected capacity change from 0 to 2048 [ 1706.543274][T17424] EXT4-fs (loop5): bad geometry: first data block 4228317184 is beyond end of filesystem (512) [ 1706.543871][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.561652][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d 02:16:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffdfd0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000018000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1706.588415][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.596484][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1706.608061][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.616049][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1706.665840][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.673822][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1706.685251][T17399] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.693258][T17399] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:14 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000000002000000000500000000fe04000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1706.761885][T17450] loop5: detected capacity change from 0 to 2048 [ 1706.775569][T17453] loop3: detected capacity change from 0 to 2048 [ 1706.795682][T17455] loop2: detected capacity change from 0 to 2048 [ 1706.810088][T17450] EXT4-fs (loop5): bad geometry: first data block 4261281791 is beyond end of filesystem (512) [ 1706.826407][T17453] EXT4-fs (loop3): bad geometry: first data block 1572864 is beyond end of filesystem (512) [ 1706.841115][T17455] EXT4-fs (loop2): bad geometry: first data block 16122624 is beyond end of filesystem (512) [ 1706.868413][T17450] loop5: detected capacity change from 0 to 2048 [ 1706.876566][T17453] loop3: detected capacity change from 0 to 2048 [ 1706.877003][T17455] loop2: detected capacity change from 0 to 2048 [ 1706.891941][T17450] EXT4-fs (loop5): bad geometry: first data block 4261281791 is beyond end of filesystem (512) [ 1706.907612][T17453] EXT4-fs (loop3): bad geometry: first data block 1572864 is beyond end of filesystem (512) 02:16:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffffd0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1706.933334][T17455] EXT4-fs (loop2): bad geometry: first data block 16122624 is beyond end of filesystem (512) [ 1706.939183][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.951452][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1706.979587][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1706.987592][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1706.999554][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.007537][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1707.047378][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.055363][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1707.066817][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.074883][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1707.127395][T17479] loop5: detected capacity change from 0 to 2048 [ 1707.137267][T17479] EXT4-fs (loop5): bad geometry: first data block 4261412863 is beyond end of filesystem (512) [ 1707.174255][T17479] loop5: detected capacity change from 0 to 2048 [ 1707.181204][T17479] EXT4-fs (loop5): bad geometry: first data block 4261412863 is beyond end of filesystem (512) [ 1707.198672][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.206677][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1707.231399][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.239374][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1707.250751][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.258732][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 02:16:14 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x9c0, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2}, {0x9, 0x3, 0xb8, 0x4}, {0x3, 0x6, 0x2, 0x7}, {0x22c, 0x3, 0x40, 0xfe}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2e0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4bf10f88}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xff, 0xfe, 0x3a}, {0x9, 0x2, 0x20, 0x4}, {0x8, 0x7, 0x5, 0x6}, {0x0, 0x19, 0x7, 0x1}, {0x0, 0x8, 0x3, 0x2}, {0x7, 0xf, 0xea, 0x15b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0xdf}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x4, 0x9}]}}}]}}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x6, 0x12, @empty, @local, 0x700, 0x10, 0x9, 0x6000000}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x140}}, 0x0) 02:16:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f00000000001f000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000005000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) 02:16:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003f7000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000fffffffe0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1707.298207][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.306183][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1707.317763][T17420] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.325749][T17420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 [ 1707.425431][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.433525][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1707.449771][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.457748][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1707.469278][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.477268][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1707.514254][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.522237][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1707.533667][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.541645][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000020000000005000000000020000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000013e00)) [ 1707.593193][T17498] loop3: detected capacity change from 0 to 2048 [ 1707.593812][T17496] loop2: detected capacity change from 0 to 2048 [ 1707.606189][T17498] EXT4-fs (loop3): bad geometry: first data block 2031616 is beyond end of filesystem (512) [ 1707.607458][T17497] loop5: detected capacity change from 0 to 2048 [ 1707.627626][T17497] EXT4-fs (loop5): bad geometry: first data block 4278190079 is beyond end of filesystem (512) [ 1707.639429][T17496] EXT4-fs (loop2): bad geometry: first data block 16188160 is beyond end of filesystem (512) [ 1707.654509][T17498] loop3: detected capacity change from 0 to 2048 [ 1707.661687][T17498] EXT4-fs (loop3): bad geometry: first data block 2031616 is beyond end of filesystem (512) [ 1707.674165][T17497] loop5: detected capacity change from 0 to 2048 [ 1707.683247][T17497] EXT4-fs (loop5): bad geometry: first data block 4278190079 is beyond end of filesystem (512) [ 1707.695688][T17496] loop2: detected capacity change from 0 to 2048 [ 1707.702725][T17496] EXT4-fs (loop2): bad geometry: first data block 16188160 is beyond end of filesystem (512) [ 1707.705518][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.720859][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x00000000c907201d [ 1707.737756][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 02:16:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000020000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be", 0x23, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000001ff0100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) 02:16:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f0000000003f8000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2800}, {&(0x7f0000000040)="8081000000180000d3f4655fd3000000000000000000000000000100400000001011be13", 0x24, 0x2c00}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x20000}], 0x0, &(0x7f0000013e00)) [ 1707.745739][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000095bf66fd [ 1707.757519][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.765523][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000060d4ff53 [ 1707.821591][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.829569][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000011e750bf [ 1707.840971][T17472] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1707.848952][T17472] ref_ctr decrement failed for inode: 0x361c offset: 0xdc16 ref_ctr_offset: 0x4 of mm: 0x0000000031e39702 02:16:15 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc16}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xfffffff8, 0x100, 0x56, 0x4, 0x71}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x7, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x204, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000a087000000000000000000000000000000000000000000000000000000000000000000000000000008001f00d1197a5275d6bd4057c9333a076ada1f40a84a626c5526014ed1778d83e40d2afe707a140b1370d7001ccf111b4119fc54ea1fbc94cf13a8a2af96ef984233c44a293faebe182e71153171f13baf331365bbd6b3ac69861920314ebcd9b252ba0049994f2b3f68e5b24e8a88d2f2c40367ccabd49eadcfcd306cc62db326dd4ff18ef4a0d26afd1fdb25b60df79dccd8e69549e8df9743a5ec2ae138f0be2d3f37c44982eb9aab611696bd4aef82ca", @ANYRES32=r3, @ANYBLOB], 0x140}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0xa00, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x18, 0xff, 0xfffffc00}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x4, 0x3f, 0x6186}, {0x6, 0x6, 0xf8, 0x8}, {0x7, 0x3, 0x1f, 0x2