$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:10:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  835.368044] loop2: detected capacity change from 0 to 544
[  835.385574] loop7: detected capacity change from 0 to 544
[  835.395317] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  835.396789] EXT4-fs (loop2): group descriptors corrupted!
[  835.411303] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  835.412868] EXT4-fs (loop7): group descriptors corrupted!
[  835.422603] loop5: detected capacity change from 0 to 16
[  835.445139] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:10:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:10:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  835.656724] loop2: detected capacity change from 0 to 544
[  835.664652] loop7: detected capacity change from 0 to 544
[  835.674175] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  835.675550] EXT4-fs (loop2): group descriptors corrupted!
[  835.698492] loop5: detected capacity change from 0 to 16
[  835.706332] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  835.707768] EXT4-fs (loop7): group descriptors corrupted!
[  835.713734] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:10:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:47 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:10:47 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:47 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:47 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:10:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffff)
lseek(r1, 0x0, 0x3)

05:10:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  851.017018] loop5: detected capacity change from 0 to 16
[  851.018816] loop2: detected capacity change from 0 to 544
[  851.027355] loop7: detected capacity change from 0 to 544
[  851.044506] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  851.048946] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  851.049724] EXT4-fs (loop7): group descriptors corrupted!
[  851.050397] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  851.051100] EXT4-fs (loop2): group descriptors corrupted!
[  851.068316] perf: interrupt took too long (5109 > 5107), lowering kernel.perf_event_max_sample_rate to 39000
[  851.072633] perf: interrupt took too long (10357 > 10276), lowering kernel.perf_event_max_sample_rate to 19000
[  851.075532] perf: interrupt took too long (13000 > 12946), lowering kernel.perf_event_max_sample_rate to 15000
[  851.094580] perf: interrupt took too long (16264 > 16250), lowering kernel.perf_event_max_sample_rate to 12000
05:10:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:10:48 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:48 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  851.201942] perf: interrupt took too long (20334 > 20330), lowering kernel.perf_event_max_sample_rate to 9000
[  851.217188] loop5: detected capacity change from 0 to 16
[  851.231068] loop2: detected capacity change from 0 to 544
[  851.239210] loop7: detected capacity change from 0 to 544
[  851.251991] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  851.252874] EXT4-fs (loop2): group descriptors corrupted!
[  851.253801] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (2 blocks)
05:10:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  851.261063] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  851.261802] EXT4-fs (loop7): group descriptors corrupted!
05:10:48 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:10:48 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:10:48 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  851.429536] loop2: detected capacity change from 0 to 544
[  851.434144] loop7: detected capacity change from 0 to 544
[  851.461214] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  851.462763] EXT4-fs (loop2): group descriptors corrupted!
[  851.465920] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
05:10:48 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  851.467412] EXT4-fs (loop7): group descriptors corrupted!
05:10:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:10:48 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:10:48 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000029000f00", 0x10, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  851.687798] loop5: detected capacity change from 0 to 16
[  851.727214] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  851.751149] loop7: detected capacity change from 0 to 544
[  851.780122] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:11:01 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffff)
lseek(r1, 0x0, 0x0)

[  864.354447] loop5: detected capacity change from 0 to 16
05:11:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:11:01 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:01 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:11:01 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:01 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  864.377271] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  864.394384] loop7: detected capacity change from 0 to 544
[  864.403940] loop2: detected capacity change from 0 to 544
[  864.418325] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  864.419675] EXT4-fs (loop7): group descriptors corrupted!
[  864.426595] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:11:01 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffff)
lseek(r1, 0x0, 0x0)

05:11:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:11:15 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:15 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:11:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  878.828471] loop2: detected capacity change from 0 to 544
[  878.830959] loop5: detected capacity change from 0 to 16
[  878.838644] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  878.844145] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  878.844937] EXT4-fs (loop2): group descriptors corrupted!
[  878.893294] loop7: detected capacity change from 0 to 544
[  878.923052] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  878.924356] EXT4-fs (loop7): group descriptors corrupted!
05:11:15 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:15 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:15 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  879.114957] loop5: detected capacity change from 0 to 16
[  879.146997] loop2: detected capacity change from 0 to 544
[  879.153122] loop7: detected capacity change from 0 to 544
[  879.155850] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  879.165132] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  879.166502] EXT4-fs (loop2): group descriptors corrupted!
[  879.170887] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  879.172221] EXT4-fs (loop7): group descriptors corrupted!
05:11:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffff)
lseek(r1, 0x0, 0x0)

[  892.462945] loop2: detected capacity change from 0 to 544
05:11:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:11:29 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:11:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:29 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:11:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:29 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  892.478578] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  892.479471] EXT4-fs (loop2): group descriptors corrupted!
[  892.493448] loop5: detected capacity change from 0 to 16
[  892.521541] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  892.529810] loop7: detected capacity change from 0 to 544
05:11:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  892.550498] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  892.551387] EXT4-fs (loop7): group descriptors corrupted!
05:11:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f00000000", 0x48, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  892.657209] loop5: detected capacity change from 0 to 16
[  892.665617] loop2: detected capacity change from 0 to 544
[  892.672461] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (2 blocks)
05:11:29 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:29 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  892.700951] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  892.702542] EXT4-fs (loop2): group descriptors corrupted!
05:11:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:29 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  892.784489] loop7: detected capacity change from 0 to 544
[  892.800585] loop5: detected capacity change from 0 to 16
[  892.808786] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  892.809453] EXT4-fs (loop7): group descriptors corrupted!
[  892.839607] loop2: detected capacity change from 0 to 544
[  892.847607] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  892.856915] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  892.857582] EXT4-fs (loop2): group descriptors corrupted!
05:11:42 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:42 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  905.259678] loop5: detected capacity change from 0 to 16
05:11:42 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:42 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:42 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:11:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:11:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  905.266790] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  905.274191] loop2: detected capacity change from 0 to 544
[  905.305802] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  905.306598] EXT4-fs (loop2): group descriptors corrupted!
[  905.324090] loop7: detected capacity change from 0 to 544
[  905.359259] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  905.360167] EXT4-fs (loop7): group descriptors corrupted!
05:11:42 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012", 0x5, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  905.437609] loop5: detected capacity change from 0 to 16
05:11:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  905.459982] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:11:42 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022000000", 0xc, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:42 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  905.502918] loop2: detected capacity change from 0 to 544
05:11:42 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  905.535803] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  905.537406] EXT4-fs (loop2): group descriptors corrupted!
[  905.549362] loop7: detected capacity change from 0 to 544
05:11:42 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  905.563705] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:11:42 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef0100", 0x3c, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:42 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012", 0x5, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  905.712694] loop5: detected capacity change from 0 to 16
05:11:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  905.750499] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (2 blocks)
[  905.818100] loop2: detected capacity change from 0 to 544
[  905.856515] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  905.857910] EXT4-fs (loop2): group descriptors corrupted!
05:11:57 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:57 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012", 0x5, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  920.538797] loop2: detected capacity change from 0 to 544
05:11:57 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:57 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:11:57 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  920.579077] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  920.579861] EXT4-fs (loop2): group descriptors corrupted!
[  920.581480] loop5: detected capacity change from 0 to 16
[  920.590292] loop7: detected capacity change from 0 to 544
[  920.619935] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  920.631111] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  920.632797] EXT4-fs (loop7): group descriptors corrupted!
05:11:57 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="02000000120000", 0x7, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:11:57 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:11:57 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:11:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  920.863291] loop7: detected capacity change from 0 to 544
05:11:57 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  920.882646] loop5: detected capacity change from 0 to 16
[  920.886003] loop2: detected capacity change from 0 to 544
[  920.903173] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  920.904531] EXT4-fs (loop7): group descriptors corrupted!
[  920.912966] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:11:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  920.917363] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  920.918592] EXT4-fs (loop2): group descriptors corrupted!
05:11:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:11:57 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655f", 0x30, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

[  921.152633] loop5: detected capacity change from 0 to 16
[  921.179963] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:12:10 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r1, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

05:12:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100", 0x36, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="02000000120000", 0x7, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:10 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  933.503649] loop5: detected capacity change from 0 to 16
[  933.506798] loop7: detected capacity change from 0 to 544
05:12:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:12:10 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:12:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:12:10 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  933.518115] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  933.518906] EXT4-fs (loop7): group descriptors corrupted!
[  933.525456] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  933.541857] loop2: detected capacity change from 0 to 544
05:12:10 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100", 0x36, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

[  933.581223] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  933.582977] EXT4-fs (loop2): group descriptors corrupted!
[  933.660997] loop5: detected capacity change from 0 to 16
[  933.670595] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:12:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:23 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200", 0xa, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:12:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100", 0x36, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r1, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

05:12:23 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="02000000120000", 0x7, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:12:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  946.778485] loop7: detected capacity change from 0 to 544
[  946.784055] loop5: detected capacity change from 0 to 16
[  946.785283] loop2: detected capacity change from 0 to 544
[  946.794551] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  946.795232] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[  946.800251] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  946.801036] EXT4-fs (loop2): group descriptors corrupted!
05:12:23 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r1, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

05:12:23 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:12:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  946.972936] loop7: detected capacity change from 0 to 544
[  946.975343] loop5: detected capacity change from 0 to 16
[  946.986137] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  946.987144] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  946.988013] EXT4-fs (loop7): group descriptors corrupted!
[  946.988782] loop2: detected capacity change from 0 to 544
[  946.997619] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  946.998308] EXT4-fs (loop2): group descriptors corrupted!
05:12:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:12:23 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:23 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  947.131774] loop7: detected capacity change from 0 to 544
[  947.147837] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  947.149385] EXT4-fs (loop7): group descriptors corrupted!
[  947.155512] loop2: detected capacity change from 0 to 544
[  947.202815] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  947.204335] EXT4-fs (loop2): group descriptors corrupted!
05:12:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:24 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:24 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:24 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  947.332198] loop5: detected capacity change from 0 to 16
[  947.343628] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:12:24 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  947.437532] loop7: detected capacity change from 0 to 544
[  947.461497] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  947.463111] EXT4-fs (loop7): group descriptors corrupted!
[  947.506883] loop2: detected capacity change from 0 to 544
[  947.529080] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  947.530429] EXT4-fs (loop2): group descriptors corrupted!
05:12:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:12:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:12:37 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef01", 0x3b, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

[  960.182471] loop2: detected capacity change from 0 to 544
05:12:37 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  960.223601] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  960.224519] EXT4-fs (loop2): group descriptors corrupted!
[  960.247395] loop7: detected capacity change from 0 to 544
[  960.270002] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[  960.272317] loop5: detected capacity change from 0 to 16
[  960.288374] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (2 blocks)
05:12:37 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:37 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:37 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  960.408051] loop5: detected capacity change from 0 to 16
[  960.410875] loop7: detected capacity change from 0 to 544
[  960.419406] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (2 blocks)
05:12:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  960.428894] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  960.430156] loop2: detected capacity change from 0 to 544
[  960.430343] EXT4-fs (loop7): group descriptors corrupted!
[  960.442809] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  960.443491] EXT4-fs (loop2): group descriptors corrupted!
05:12:51 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:12:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:12:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  974.230183] loop7: detected capacity change from 0 to 544
05:12:51 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:12:51 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:12:51 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:51 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  974.241539] loop2: detected capacity change from 0 to 544
[  974.247796] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  974.248436] EXT4-fs (loop7): group descriptors corrupted!
[  974.250333] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  974.251043] EXT4-fs (loop2): group descriptors corrupted!
[  974.281191] loop5: detected capacity change from 0 to 16
05:12:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:51 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  974.370191] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  974.384628] loop7: detected capacity change from 0 to 544
[  974.404291] loop2: detected capacity change from 0 to 544
[  974.422626] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[  974.423280] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  974.425185] EXT4-fs (loop7): group descriptors corrupted!
05:12:51 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:12:51 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:12:51 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  974.613247] loop2: detected capacity change from 0 to 544
[  974.638299] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[  974.659671] loop5: detected capacity change from 0 to 16
[  974.673554] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:13:04 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:04 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:04 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53", 0x39, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:13:04 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:04 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:04 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  987.997262] loop5: detected capacity change from 0 to 16
[  987.999256] loop7: detected capacity change from 0 to 544
05:13:04 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:04 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  988.012896] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  988.014336] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  988.015191] EXT4-fs (loop7): group descriptors corrupted!
[  988.078919] loop2: detected capacity change from 0 to 544
05:13:04 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  988.104975] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:13:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

[  988.153905] loop7: detected capacity change from 0 to 544
05:13:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000027f)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r1}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[  988.176611] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  988.178011] EXT4-fs (loop7): group descriptors corrupted!
[  988.202828] loop5: detected capacity change from 0 to 16
05:13:05 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[  988.226704] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:13:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:05 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[  988.293388] loop2: detected capacity change from 0 to 544
[  988.298123] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:13:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:13:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[  988.352282] loop7: detected capacity change from 0 to 544
[  988.370126] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  988.371519] EXT4-fs (loop7): group descriptors corrupted!
05:13:16 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0}], 0x0, &(0x7f0000014900))

05:13:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:16 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900))

05:13:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000027f)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r1}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1000.061291] loop7: detected capacity change from 0 to 544
05:13:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1000.083055] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1000.129586] loop2: detected capacity change from 0 to 544
[ 1000.138914] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1000.143982] loop5: detected capacity change from 0 to 16
05:13:17 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1000.172093] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
05:13:17 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1000.258167] loop7: detected capacity change from 0 to 544
[ 1000.293770] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1000.295009] EXT4-fs (loop7): group descriptors corrupted!
05:13:17 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:17 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, 0x0)

05:13:17 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000027f)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r1}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1000.315799] loop5: detected capacity change from 0 to 16
05:13:17 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:17 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:17 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1000.394615] loop2: detected capacity change from 0 to 544
[ 1000.413018] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:13:17 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:17 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, 0x0)

[ 1000.527833] loop5: detected capacity change from 0 to 16
[ 1000.570245] loop7: detected capacity change from 0 to 544
[ 1000.604829] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1000.606231] EXT4-fs (loop7): group descriptors corrupted!
05:13:31 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:31 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:31 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:31 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:31 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, 0x0)

05:13:31 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:31 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r0, 0x1, 0x0, 0x0, {0x0, r1}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1015.029525] loop5: detected capacity change from 0 to 16
05:13:31 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1015.076298] loop2: detected capacity change from 0 to 544
[ 1015.079792] loop7: detected capacity change from 0 to 544
[ 1015.103496] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1015.104220] EXT4-fs (loop7): group descriptors corrupted!
[ 1015.109102] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:13:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r0, 0x1, 0x0, 0x0, {0x0, r1}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1015.275982] loop7: detected capacity change from 0 to 544
05:13:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1015.285069] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1015.285823] EXT4-fs (loop7): group descriptors corrupted!
[ 1015.328610] loop2: detected capacity change from 0 to 544
[ 1015.352926] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:13:32 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1015.473423] loop7: detected capacity change from 0 to 544
[ 1015.476132] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1015.476856] EXT4-fs (loop7): group descriptors corrupted!
[ 1029.293008] loop7: detected capacity change from 0 to 544
05:13:46 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:46 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r0, 0x1, 0x0, 0x0, {0x0, r1}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:46 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:46 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:46 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:46 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:46 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1029.315708] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1029.316496] EXT4-fs (loop7): group descriptors corrupted!
[ 1029.328369] loop2: detected capacity change from 0 to 544
[ 1029.343181] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:13:58 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:58 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:58 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:58 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012", 0x5, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:58 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:58 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1041.859083] loop7: detected capacity change from 0 to 544
05:13:58 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1041.875893] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1041.876553] EXT4-fs (loop7): group descriptors corrupted!
[ 1041.879462] loop2: detected capacity change from 0 to 544
[ 1041.896986] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:13:58 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012", 0x5, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:58 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:13:58 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1042.153867] loop7: detected capacity change from 0 to 544
[ 1042.158582] loop2: detected capacity change from 0 to 544
05:13:59 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
fchdir(0xffffffffffffffff)

[ 1042.188866] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1042.190318] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1042.191547] EXT4-fs (loop7): group descriptors corrupted!
05:13:59 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:13:59 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012", 0x5, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:59 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:59 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1042.434847] loop7: detected capacity change from 0 to 544
[ 1042.437694] loop2: detected capacity change from 0 to 544
[ 1042.447068] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1042.448417] EXT4-fs (loop7): group descriptors corrupted!
[ 1042.481001] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:13:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:13:59 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="02000000120000", 0x7, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:59 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1042.612323] loop7: detected capacity change from 0 to 544
[ 1042.659201] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1042.660343] EXT4-fs (loop7): group descriptors corrupted!
05:13:59 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
fchdir(0xffffffffffffffff)

05:13:59 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff6", 0x1b, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:13:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1042.768221] loop2: detected capacity change from 0 to 544
[ 1042.801633] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:14:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:14:12 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:14:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
fchdir(0xffffffffffffffff)

05:14:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
fchdir(0xffffffffffffffff)

05:14:12 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="02000000120000", 0x7, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:12 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:12 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:12 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1056.038986] loop2: detected capacity change from 0 to 544
[ 1056.049421] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1056.063588] loop7: detected capacity change from 0 to 544
[ 1056.088346] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1056.089115] EXT4-fs (loop7): group descriptors corrupted!
05:14:13 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:13 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="02000000120000", 0x7, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:13 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1056.226691] loop7: detected capacity change from 0 to 544
[ 1056.256062] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1056.256783] EXT4-fs (loop7): group descriptors corrupted!
05:14:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

05:14:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:26 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

05:14:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:14:26 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:14:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1069.545369] loop7: detected capacity change from 0 to 544
[ 1069.550815] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1069.551520] EXT4-fs (loop7): group descriptors corrupted!
[ 1069.559391] loop2: detected capacity change from 0 to 544
[ 1069.571701] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:14:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

[ 1069.754560] loop2: detected capacity change from 0 to 544
[ 1069.758920] loop7: detected capacity change from 0 to 544
[ 1069.770807] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1069.771912] EXT4-fs (loop7): group descriptors corrupted!
05:14:26 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1069.794166] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:14:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

05:14:26 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:14:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:14:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a", 0x17, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1069.967769] loop7: detected capacity change from 0 to 544
[ 1070.008358] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1070.009678] EXT4-fs (loop7): group descriptors corrupted!
[ 1070.037451] loop2: detected capacity change from 0 to 544
[ 1070.067450] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:14:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:39 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:39 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:14:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

[ 1082.224017] loop2: detected capacity change from 0 to 544
05:14:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1082.239260] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1082.274985] loop7: detected capacity change from 0 to 544
05:14:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1082.316062] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1082.317449] EXT4-fs (loop7): group descriptors corrupted!
[ 1082.384529] loop2: detected capacity change from 0 to 544
05:14:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1082.431451] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:14:39 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:39 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1082.470423] loop7: detected capacity change from 0 to 544
[ 1082.484119] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1082.485484] EXT4-fs (loop7): group descriptors corrupted!
05:14:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

05:14:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:52 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:52 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:52 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0e", 0x15, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1095.919546] loop2: detected capacity change from 0 to 544
05:14:52 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1095.931615] loop7: detected capacity change from 0 to 544
[ 1095.949522] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1095.950323] EXT4-fs (loop7): group descriptors corrupted!
[ 1095.955184] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:14:52 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:14:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:14:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1096.076610] loop7: detected capacity change from 0 to 544
[ 1096.087659] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:15:05 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1108.408926] loop7: detected capacity change from 0 to 544
[ 1108.425101] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1108.430176] loop2: detected capacity change from 0 to 544
[ 1108.448867] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:15:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:15:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:05 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1108.746027] loop7: detected capacity change from 0 to 544
05:15:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1108.775068] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1108.796252] loop2: detected capacity change from 0 to 544
[ 1108.828001] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:15:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:05 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1108.990117] loop7: detected capacity change from 0 to 544
[ 1109.007941] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1109.022052] loop2: detected capacity change from 0 to 544
05:15:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1109.041589] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:15:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:05 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1109.210214] loop7: detected capacity change from 0 to 544
[ 1109.221254] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:15:19 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:19 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:19 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:19 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:19 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:19 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:19 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1122.759707] loop7: detected capacity change from 0 to 544
[ 1122.780889] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:15:19 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1122.824329] loop2: detected capacity change from 0 to 544
[ 1122.834782] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1122.883206] loop7: detected capacity change from 0 to 544
[ 1122.894887] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:15:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:34 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:34 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1137.631367] loop2: detected capacity change from 0 to 544
[ 1137.641836] loop7: detected capacity change from 0 to 544
[ 1137.657629] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1137.666602] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:15:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:34 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:34 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1137.949760] loop2: detected capacity change from 0 to 544
[ 1137.960513] loop7: detected capacity change from 0 to 544
[ 1137.974920] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1137.993167] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:15:34 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:34 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:35 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:35 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:35 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1138.242550] loop2: detected capacity change from 0 to 544
05:15:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1138.266003] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1138.296164] loop7: detected capacity change from 0 to 544
[ 1138.328613] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:15:35 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:15:35 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:35 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:35 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:15:35 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1138.538898] loop2: detected capacity change from 0 to 544
[ 1138.559565] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1138.625436] loop7: detected capacity change from 0 to 544
[ 1138.648466] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:15:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:50 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:50 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:15:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:15:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:50 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:50 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1153.941560] loop2: detected capacity change from 0 to 544
[ 1153.953244] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1153.959978] loop7: detected capacity change from 0 to 544
[ 1153.982692] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:15:50 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff6", 0x1b, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:15:50 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:15:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:15:51 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1154.190034] loop7: detected capacity change from 0 to 544
[ 1154.205157] loop2: detected capacity change from 0 to 544
[ 1154.224009] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1154.227070] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:02 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:02 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:02 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:02 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:02 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:02 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:02 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x41000)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xa402, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file1\x00'})
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x7fffffff)
lseek(r1, 0x9, 0x3)

05:16:02 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1165.888282] loop7: detected capacity change from 0 to 544
[ 1165.891882] loop2: detected capacity change from 0 to 544
[ 1165.912381] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1165.915833] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1179.252140] loop2: detected capacity change from 0 to 544
[ 1179.255695] loop7: detected capacity change from 0 to 544
[ 1179.260917] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1179.265886] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1179.553099] loop2: detected capacity change from 0 to 544
[ 1179.574245] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:16:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

05:16:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 1179.651811] loop7: detected capacity change from 0 to 544
05:16:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

[ 1179.673978] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:16 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a", 0x17, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1179.867320] loop2: detected capacity change from 0 to 544
05:16:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1179.893938] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1179.950250] loop7: detected capacity change from 0 to 544
[ 1179.973022] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

05:16:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:29 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:29 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:29 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:29 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 1192.814995] loop7: detected capacity change from 0 to 544
[ 1192.821511] loop2: detected capacity change from 0 to 544
[ 1192.827079] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1192.847169] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:29 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

05:16:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:29 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1193.111515] loop2: detected capacity change from 0 to 544
[ 1193.114326] loop7: detected capacity change from 0 to 544
[ 1193.154316] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1193.158474] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:30 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0edc1a8bde5ff68db5603294cecf0000", 0x24, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000029000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010500)="ff3f0c00fc010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x1080, 0x2000}, {&(0x7f0000011600)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x4000}, {&(0x7f0000011700)="00000000001000"/32, 0x20, 0x5000}, {&(0x7f0000011800)="00000000001000"/32, 0x20, 0x6000}, {&(0x7f0000011900)="00000000001000"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="504d4d00504d4dffd9f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x8000}, {&(0x7f0000011b00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x9000}, {&(0x7f0000011c00)="0200"/32, 0x20, 0x9400}, {&(0x7f0000011d00)="0300"/32, 0x20, 0x9800}, {&(0x7f0000011e00)="0400"/32, 0x20, 0x9c00}, {&(0x7f0000011f00)="0500"/32, 0x20, 0xa000}, {&(0x7f0000012000)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xa400}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xb000}, {&(0x7f0000012200)="0200"/32, 0x20, 0xb400}, {0x0}], 0x0, &(0x7f0000014900))

05:16:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:30 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1193.353366] loop2: detected capacity change from 0 to 544
[ 1193.365131] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:16:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:44 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:44 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

05:16:44 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 1207.538896] loop2: detected capacity change from 0 to 544
[ 1207.551426] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1207.553650] loop7: detected capacity change from 0 to 544
[ 1207.588348] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:44 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, 0x0, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:44 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 1207.776542] loop2: detected capacity change from 0 to 544
05:16:44 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c0e", 0x15, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1207.803017] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, 0x0, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1207.841433] loop7: detected capacity change from 0 to 544
05:16:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, 0x0, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1207.859455] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:56 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:16:56 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:56 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:56 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:56 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:56 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, 0x0, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:16:56 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:16:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1219.581218] loop7: detected capacity change from 0 to 544
[ 1219.592272] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1219.622736] loop2: detected capacity change from 0 to 544
[ 1219.643984] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:56 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:16:56 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1219.762129] loop7: detected capacity change from 0 to 544
[ 1219.778995] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:16:56 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000", 0xf, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1219.862360] loop2: detected capacity change from 0 to 544
[ 1219.870655] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:17:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

05:17:09 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:09 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000", 0xf, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:09 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:09 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:09 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r1}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

05:17:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

05:17:09 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200), r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1232.853978] loop2: detected capacity change from 0 to 544
[ 1232.861853] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1232.897207] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1232.898146] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1232.898849] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1232.899500] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1232.900259] blk_print_req_error: 249 callbacks suppressed
[ 1232.900268] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 1232.910257] loop7: detected capacity change from 0 to 544
[ 1232.920277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1232.920852] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1232.921659] buffer_io_error: 254 callbacks suppressed
[ 1232.921667] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1232.929654] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1232.941585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1232.942480] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1232.943815] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1232.945203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1232.946062] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 2
[ 1232.947278] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1232.948323] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1232.949362] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1232.950397] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1232.951445] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1232.952479] Buffer I/O error on dev sr0, logical block 7, async page read
05:17:09 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000", 0xf, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1232.985384] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1232.986363] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1232.987051] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1232.987742] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1232.988462] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2
[ 1232.989299] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1232.990014] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1232.991442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1232.992605] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1232.994419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1232.995253] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1232.999176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1232.999749] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1233.004306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.004889] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1233.008976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.009514] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1233.012081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.012895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.014857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:17:09 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

[ 1233.070854] loop2: detected capacity change from 0 to 544
05:17:09 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0))
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r2}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r1, 0x5, 0xffffffffffffffff, 0x6)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)

05:17:09 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1233.096035] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1233.111288] loop7: detected capacity change from 0 to 544
05:17:09 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200), r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000027f)

05:17:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1233.138060] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1233.138698] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1233.139454] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1233.139942] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1233.143621] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1233.158340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.158960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.159545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.163875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.164436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.165028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.165580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.166191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.166870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.167985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.168519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.169354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.170920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.171928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.172975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.174337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.178008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.179055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.180962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.181523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.182144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.183330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.186220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.198313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.199672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.201059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.202200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.203425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.205284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.206707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.208001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.228288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:17:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:10 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1233.277413] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1233.278101] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1233.278553] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1233.279014] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1233.280409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.281907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.283098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.284333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.285641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.287042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.288253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.289517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.291272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.292508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.293798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.295092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.296295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.297554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.298811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.300030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.333784] loop2: detected capacity change from 0 to 544
05:17:10 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 1233.354146] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1233.376078] loop7: detected capacity change from 0 to 544
[ 1233.397107] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1233.456901] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1233.457533] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1233.458286] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1233.458748] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1233.460075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.461233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.462996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.464091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.465172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.466372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.467472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.468698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.470165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.473218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.474320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.475642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.477997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.484073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.485412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1233.488661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:17:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200), r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000027f)

05:17:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1249.600672] loop2: detected capacity change from 0 to 544
[ 1249.615411] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1249.621219] loop7: detected capacity change from 0 to 544
[ 1249.641677] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1249.642998] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1249.644025] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1249.644974] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1249.646026] blk_print_req_error: 70 callbacks suppressed
[ 1249.646040] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 1249.646511] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1249.649415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.650238] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1249.651672] buffer_io_error: 86 callbacks suppressed
[ 1249.651686] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1249.653980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.655066] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1249.656271] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1249.657623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.658493] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1249.659741] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1249.661128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.661990] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1249.663274] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1249.664667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.665528] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1249.666791] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1249.668251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.669106] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1249.670359] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1249.671445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1249.672325] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[ 1249.673526] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1249.674572] Buffer I/O error on dev sr0, logical block 7, async page read
05:17:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000", 0x12, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:26 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1249.835552] loop2: detected capacity change from 0 to 544
[ 1249.850639] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1249.870610] loop7: detected capacity change from 0 to 544
[ 1249.888233] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:17:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:38 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:38 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

05:17:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:38 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
fchdir(0xffffffffffffffff)

05:17:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

[ 1262.074576] loop7: detected capacity change from 0 to 544
[ 1262.078834] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1262.094261] loop2: detected capacity change from 0 to 544
[ 1262.122716] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:17:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1262.148482] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1262.149146] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1262.149623] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1262.150109] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1262.150615] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 1262.151626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.152041] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.152693] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1262.154388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.154788] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.155351] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1262.156871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.157290] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.157840] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1262.158682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.159142] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.159700] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1262.160471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.160858] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.161424] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1262.162201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.162568] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.163204] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1262.164003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.164390] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.164973] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1262.165914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.166280] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.166853] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1262.167662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.168056] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1262.168618] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1262.169398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.169870] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1262.170637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.171310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.172041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.172583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.173299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.175257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.180762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.182212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.183673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.185161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.186617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.188164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.189658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.192339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.194128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.197324] loop7: detected capacity change from 0 to 544
[ 1262.199119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.202349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.203760] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1262.207111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.208750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.210177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.217492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.222316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.313744] loop7: detected capacity change from 0 to 544
05:17:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

05:17:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000708595ab15e94b9c8803908244a41818010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1262.341838] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1262.348306] loop2: detected capacity change from 0 to 544
05:17:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1262.378177] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:17:39 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000027f)

05:17:39 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:17:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
fchdir(0xffffffffffffffff)

05:17:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r4 = getpgid(0x0)
syz_open_procfs(r4, &(0x7f0000000040)='net/tcp6\x00')
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r5)

[ 1262.490315] loop7: detected capacity change from 0 to 544
[ 1262.501120] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1262.512316] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1262.513260] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1262.514054] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1262.514708] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1262.517511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.518692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.520027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.525624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.527023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.528608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.530284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.533103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.541576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.548498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.549966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.557231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.560529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.562096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.565975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1262.567744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:17:39 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009000000000000000000", 0x13, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:39 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1262.652273] loop2: detected capacity change from 0 to 544
[ 1262.666252] EXT4-fs warning (device loop2): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:17:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

05:17:39 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1262.751236] loop7: detected capacity change from 0 to 544
[ 1262.771481] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1274.590007] loop2: detected capacity change from 0 to 544
05:17:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

05:17:51 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:51 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:51 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

05:17:51 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:17:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

[ 1274.621926] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1274.645663] loop7: detected capacity change from 0 to 544
[ 1274.649446] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1274.650087] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1274.650537] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1274.651052] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1274.651539] blk_print_req_error: 40 callbacks suppressed
[ 1274.651547] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 1274.656153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.656532] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.657113] buffer_io_error: 38 callbacks suppressed
[ 1274.657120] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1274.658184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.658634] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.659206] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1274.660483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.660891] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.661438] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1274.662107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.662472] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.663035] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1274.663680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.664076] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.664631] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1274.665298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.665665] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.666230] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1274.666925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.667294] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.668025] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1274.668678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.669081] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.669637] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1274.670372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.670768] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1274.671324] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1274.672356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.672760] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1274.673437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.674059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.674649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.675478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.676275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.676889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.677547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.680149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.681331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.681947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.682537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.683110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.684296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.685915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.686567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.687177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.688515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.691187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.693114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.694937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.696228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.701316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.713248] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1274.737481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.757538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.759102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.760394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.761289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.762175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.763006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.763935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.766089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.767153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.768590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.773213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.776158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.778111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.779021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.780004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.783055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.785011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.789621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.802924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.823055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.823921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.824677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.825415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.826201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.826934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:17:51 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x10000027f)

[ 1274.849570] loop2: detected capacity change from 0 to 544
05:17:51 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1274.857985] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
05:17:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:17:51 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1274.901575] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1274.902261] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1274.903148] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1274.903814] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1274.905155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.906073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.907249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.908648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.910218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.911373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.912431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.913546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.914664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.915700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.916576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.917479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.918367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.919286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.920172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.921045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.922159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.923041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.923976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.924972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.926078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.927014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.929001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.931027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.932183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.937441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.938554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.940455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.944511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.947752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.948562] loop7: detected capacity change from 0 to 544
[ 1274.948885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.950557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1274.975005] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
05:18:06 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:06 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:06 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r4 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x41000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xa402, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5}, './file1\x00'})
sendfile(r3, r4, 0x0, 0x10000027f)
r6 = eventfd2(0x8, 0x1)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x40)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
openat(r0, &(0x7f00000000c0)='./file1\x00', 0xa400, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x7fffffff)
lseek(r2, 0x9, 0x3)

05:18:06 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:06 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10000027f)

[ 1289.253281] loop2: detected capacity change from 0 to 544
[ 1289.277970] EXT4-fs warning (device loop2): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1289.284035] loop7: detected capacity change from 0 to 544
[ 1289.295337] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1289.327739] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1289.328462] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1289.328991] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1289.329616] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1289.330172] blk_print_req_error: 82 callbacks suppressed
[ 1289.330180] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 1289.331612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.332055] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.332723] buffer_io_error: 86 callbacks suppressed
[ 1289.332731] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1289.334000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.334438] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.335144] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1289.336247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.336647] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.337304] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1289.338024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.338431] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.339060] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1289.339959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.340368] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.340986] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1289.342053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.342560] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.343203] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1289.345040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.345560] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.346184] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1289.347060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.347473] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.348153] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1289.349032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.349444] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1289.350182] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1289.350960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.351381] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1289.352200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.352853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.353567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.354204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.354951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.355548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.356346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.356978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.357675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.358306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.359018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.359607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.360460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.361491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.362188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.362886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.364287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.365106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.365691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.366410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.367055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.367744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:18:06 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:06 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1289.498462] loop2: detected capacity change from 0 to 544
[ 1289.503066] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
05:18:06 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 1289.571574] loop7: detected capacity change from 0 to 544
[ 1289.584935] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1289.622431] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1289.623328] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1289.623887] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1289.624415] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1289.625431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.626128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.626951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.627865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.628523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.629303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.629999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.630679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.631372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.632063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.632685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.633438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.634061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.634746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.635373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.636124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.636953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.637642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.638298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.639012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.639610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.643075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.643687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.644395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.645682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.646330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.647389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.648030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.648895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.649485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.650183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.651129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.652978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.653590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.654269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.655267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.657870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.661984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.662605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1289.664220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:18:19 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:18:19 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r4 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x41000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xa402, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5}, './file1\x00'})
sendfile(r3, r4, 0x0, 0x10000027f)
r6 = eventfd2(0x8, 0x1)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x40)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
openat(r0, &(0x7f00000000c0)='./file1\x00', 0xa400, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x7fffffff)
lseek(r2, 0x9, 0x3)

05:18:19 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x8, 0x0, 0xe0, 0x2, 0x0, 0x6126, 0x10, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9ec, 0x1, @perf_config_ext={0xffffffffffffffb8, 0x2}, 0x2, 0x5, 0x2, 0x1, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x7ff}, r2, 0x2, r1, 0x1)

05:18:19 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:19 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040), 0x0, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:19 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:19 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1302.936766] loop7: detected capacity change from 0 to 544
[ 1302.956329] EXT4-fs warning (device loop7): read_mmp_block:106: Error -117 while reading MMP block 0
[ 1302.980698] loop2: detected capacity change from 0 to 544
[ 1303.001353] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1303.032225] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1303.033210] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1303.034096] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1303.034784] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1303.035601] blk_print_req_error: 64 callbacks suppressed
[ 1303.035612] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 1303.037805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.038596] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.039692] buffer_io_error: 62 callbacks suppressed
[ 1303.039705] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1303.041662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.042480] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.043662] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1303.045178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.046261] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.047442] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1303.049680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.050490] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.051845] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1303.053545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.054331] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.055450] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1303.056488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.057283] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[ 1303.058409] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1303.059534] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1303.060507] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1303.063297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.063921] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.064817] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1303.069059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.069596] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.070427] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1303.083314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.084381] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1303.087493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.092408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.102760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.103703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.105594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:18:19 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:20 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1303.229885] loop7: detected capacity change from 0 to 544
05:18:20 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:18:20 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:20 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1303.241641] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:18:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="5413f143e800000000e90ac700000000000000000000000000010000"], 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xd2, 0x6, 0x8, 0xf7, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0xffffffffffff532d}, 0x210, 0x25cb, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x37bc, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000006c0))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpgid(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
syz_io_uring_setup(0xaaf, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0x17, 0x0, r3}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x830, 0x3, @perf_bp={&(0x7f0000000700), 0x2}, 0x4186, 0x6, 0xdd9, 0x1, 0x1, 0x9ef4, 0x3ff, 0x0, 0x9dc2, 0x0, 0x20}, r2, 0x5, 0xffffffffffffffff, 0x6)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
sendfile(r0, r4, &(0x7f0000000340)=0x100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x10000027f)
r7 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x8, 0x0, 0xe0, 0x2, 0x0, 0x6126, 0x10, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9ec, 0x1, @perf_config_ext={0xffffffffffffffb8, 0x2}, 0x2, 0x5, 0x2, 0x1, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x7ff}, r2, 0x2, r1, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x3, 0x3, 0x0, 0x0, 0x3, 0x22604, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xc7d106e, 0x1}, 0x8080, 0x7, 0x2, 0x6, 0xff, 0x7fffffff, 0x3, 0x0, 0x9, 0x0, 0x20}, r2, 0x10, r7, 0x9)

05:18:20 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1303.313701] loop2: detected capacity change from 0 to 544
05:18:20 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1303.347845] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
05:18:20 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf1900000009", 0xa, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1303.433844] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1303.434533] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1303.435084] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1303.435556] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1303.437283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.438462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.439666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.441209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.442419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.443645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.445166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.446607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.449267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.453181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.455404] loop7: detected capacity change from 0 to 544
[ 1303.455510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.458509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.461196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.464989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.466876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.468438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.472083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.473860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.476116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.477587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.478756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.479358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.480109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.481522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.482326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.488390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.489027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.489608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.492923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.493527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.495271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1303.499984] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1303.502463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
05:18:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:18:32 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r4 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x41000)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xa402, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5}, './file1\x00'})
sendfile(r3, r4, 0x0, 0x10000027f)
r6 = eventfd2(0x8, 0x1)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x40)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
openat(r0, &(0x7f00000000c0)='./file1\x00', 0xa400, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x7fffffff)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
lseek(r2, 0x9, 0x3)

05:18:32 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
getpgid(0x0)
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

05:18:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

05:18:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000", 0xf, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

[ 1315.722862] loop2: detected capacity change from 0 to 544
[ 1315.749118] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[ 1315.777895] loop7: detected capacity change from 0 to 544
[ 1315.794231] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
05:18:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1315.932785] loop2: detected capacity change from 0 to 544
[ 1315.944150] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
05:18:32 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000014900)) (fail_nth: 1)

05:18:32 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000000000008c", 0x14, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:32 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313530373134353800"/192, 0xc0, 0x400}, {&(0x7f0000000040)="0100bbffbf19000000090000000000", 0xf, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x22000}], 0x0, &(0x7f0000014900))

05:18:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffffe, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffff)
lseek(r1, 0x0, 0x3) (fail_nth: 1)

[ 1316.084708] loop7: detected capacity change from 0 to 544
05:18:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780))
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r5 = getpgid(0x0)
syz_open_procfs(r5, &(0x7f0000000040)='net/tcp6\x00')
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r6)

05:18:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1010c2, 0xf2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r2, 0x1, 0x0, 0x0, {0x0, r3}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r4=>0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r7 = getpgid(0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r8)

[ 1316.109103] EXT4-fs warning (device loop7): ext4_multi_mount_protect:290: Invalid MMP block in superblock
[ 1316.130762] loop2: detected capacity change from 0 to 544
[ 1316.151651] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
05:18:33 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000027f)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000200)={0x10000002}, r1, 0x1, 0x0, 0x0, {0x0, r2}}, 0x6)
mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10001)
io_setup(0xd29, &(0x7f0000000780)=<r3=>0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000400000008001780aca88e140000000000bc235ad3f837e32df40472efbf5cee204c38a2097ce54ebf18d8d4087d7e689680a3bae2a601c63de5669771e74b24147349e93ca05efbda774bb67c277146ba89f8a12e31feb2aa33f64ca3b8e0971f6abdafe4513784760efd4b48e7abf787fec5f0070e69e2e1c01dd0f5a8f34dd33bfc80554ee316c2903cc04a1948faeec48a575ea201ad1055cb9bd7f9a3def6e916e8189faca87f9286f7"], 0x1c}], 0x1}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xfffffffffffffffd, 0x1, 0x1, 0x81a4, 0x93, 0x8, 0x6000000, 0x0, 0x9, 0x0, 0x40, 0x4, 0x1ff}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x2)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0)
r6 = getpgid(0x0)
syz_open_procfs(r6, &(0x7f0000000040)='net/tcp6\x00')
io_submit(r3, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="1c", 0x1}, 0x0, 0x0])
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
fchdir(r7)

[ 1316.322446] FAULT_INJECTION: forcing a failure.
[ 1316.322446] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1316.324192] CPU: 0 PID: 7900 Comm: syz-executor.3 Not tainted 6.0.0-rc1-next-20220819 #1
[ 1316.324963] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521
[ 1316.326096] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 7900, name: syz-executor.3
[ 1316.327072] preempt_count: 0, expected: 0
[ 1316.327533] RCU nest depth: 0, expected: 0
[ 1316.328003] 1 lock held by syz-executor.3/7900:
[ 1316.328540]  #0: ffff88800bb1cfe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[ 1316.329538] irq event stamp: 204
[ 1316.329930] hardirqs last  enabled at (203): [<ffffffff812bd8c8>] __up_console_sem+0x78/0x80
[ 1316.330883] hardirqs last disabled at (204): [<ffffffff8411f196>] dump_stack_lvl+0x2e/0xb3
[ 1316.331858] softirqs last  enabled at (0): [<ffffffff8114b22e>] copy_process+0x1dfe/0x6de0
[ 1316.332818] softirqs last disabled at (0): [<0000000000000000>] 0x0
[ 1316.333568] CPU: 0 PID: 7900 Comm: syz-executor.3 Not tainted 6.0.0-rc1-next-20220819 #1
[ 1316.337974] syz-executor.3[7900] cmdline: /syz-executor.3 exec
[ 1316.338919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1316.339964] Call Trace:
[ 1316.340220]  <TASK>
[ 1316.340465]  dump_stack_lvl+0x8b/0xb3
[ 1316.340871]  __might_resched.cold+0x222/0x26b
[ 1316.341322]  down_read_killable+0x75/0x490
[ 1316.341767]  ? down_read_interruptible+0x490/0x490
[ 1316.342252]  __access_remote_vm+0xac/0x6f0
[ 1316.342676]  ? follow_phys+0x2c0/0x2c0
[ 1316.343089]  ? do_raw_spin_lock+0x121/0x260
[ 1316.343511]  ? rwlock_bug.part.0+0x90/0x90
[ 1316.343949]  ? lock_release+0x3b2/0x750
[ 1316.344338]  ? __up_console_sem+0x47/0x80
[ 1316.344786]  get_mm_cmdline.part.0+0x214/0x600
[ 1316.345236]  ? dname_to_vma_addr.isra.0+0x360/0x360
[ 1316.345738]  ? _raw_spin_unlock_irqrestore+0x33/0x60
[ 1316.346242]  get_task_cmdline_kernel+0x1e9/0x230
[ 1316.346709]  dump_stack_print_cmdline.part.0+0x82/0x150
[ 1316.347239]  ? _atomic_dec_and_lock_irqsave+0x150/0x150
[ 1316.347763]  ? __wake_up_klogd.part.0+0xc5/0xf0
[ 1316.348256]  ? dump_stack_print_info+0xc6/0x190
[ 1316.348753]  dump_stack_print_info+0x185/0x190
[ 1316.349199]  dump_stack_lvl+0x7f/0xb3
[ 1316.349572]  should_fail.cold+0x5/0xa
[ 1316.349983]  _copy_to_user+0x2a/0x140
[ 1316.350358]  simple_read_from_buffer+0xcc/0x160
[ 1316.350835]  proc_fail_nth_read+0x198/0x230
[ 1316.351250]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 1316.351743]  ? security_file_permission+0xb1/0xe0
[ 1316.352213]  vfs_read+0x253/0x930
[ 1316.352573]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 1316.353075]  ? kernel_read+0x1c0/0x1c0
[ 1316.353485]  ? __fget_files+0x270/0x450
[ 1316.353912]  ksys_read+0x127/0x250
[ 1316.354270]  ? __ia32_sys_pwrite64+0x220/0x220
[ 1316.354739]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1316.355244]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1316.355778]  do_syscall_64+0x3b/0x90
[ 1316.356151]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1316.356660] RIP: 0033:0x7f6efbc1269c
[ 1316.357046] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1316.358701] RSP: 002b:00007f6ef9193170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1316.359424] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6efbc1269c
[ 1316.360103] RDX: 000000000000000f RSI: 00007f6ef91931e0 RDI: 0000000000000007
[ 1316.360786] RBP: 00007f6ef91931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1316.361447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1316.362130] R13: 00007ffd0167594f R14: 00007f6ef9193300 R15: 0000000000022000
[ 1316.362830]  </TASK>
[ 1316.384912] syz-executor.3[7900] cmdline: /syz-executor.3 exec
[ 1316.385831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 1316.386941] Call Trace:
[ 1316.387201]  <TASK>
[ 1316.387434]  dump_stack_lvl+0x8b/0xb3
[ 1316.387846]  should_fail.cold+0x5/0xa
[ 1316.388232]  _copy_to_user+0x2a/0x140
[ 1316.388618]  simple_read_from_buffer+0xcc/0x160
[ 1316.389106]  proc_fail_nth_read+0x198/0x230
[ 1316.389528]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 1316.390033]  ? security_file_permission+0xb1/0xe0
[ 1316.390509]  vfs_read+0x253/0x930
[ 1316.390892]  ? proc_tid_comm_permission+0x1c0/0x1c0
[ 1316.391372]  ? kernel_read+0x1c0/0x1c0
[ 1316.391789]  ? __fget_files+0x270/0x450
[ 1316.392197]  ksys_read+0x127/0x250
[ 1316.392577]  ? __ia32_sys_pwrite64+0x220/0x220
[ 1316.393065]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1316.393572]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1316.394108]  do_syscall_64+0x3b/0x90
[ 1316.394486]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1316.395015] RIP: 0033:0x7f6efbc1269c
[ 1316.395379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1316.397063] RSP: 002b:00007f6ef9193170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1316.397793] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6efbc1269c
[ 1316.398457] RDX: 000000000000000f RSI: 00007f6ef91931e0 RDI: 0000000000000007
[ 1316.399143] RBP: 00007f6ef91931d0 R08: 0000000000000000 R09: 0000000000000000
[ 1316.399826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1316.400495] R13: 00007ffd0167594f R14: 00007f6ef9193300 R15: 0000000000022000
[ 1316.401204]  </TASK>

VM DIAGNOSIS:
05:18:33  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=8000000033b62007 RCX=0000000000000000 RDX=ffff88801b6bb600
RSI=ffffffff816a0d5b RDI=0000000000000007 RBP=ffff88804357ff60 RSP=ffff888021a0f800
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000008 R11=0000000000000001
R12=0000000000000008 R13=dffffc0000000000 R14=ffffea0000ced880 R15=0000000000000000
RIP=ffffffff8145a1c0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556c56400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f19d334af80 CR3=0000000008fa6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=ffff8880102e4708 RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000000001
RSI=0000000000000001 RDI=ffff8880102e46c0 RBP=ffff8880102e46c0 RSP=ffff88800fcbfe40
R8 =0000000000000001 R9 =ffffffff86ca3817 R10=fffffbfff0d94702 R11=0000000000000001
R12=0000000000010248 R13=0000000000010247 R14=0000000000000247 R15=ffff8880102e46c0
RIP=ffffffff84201985 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020001000 CR3=000000001e3c4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000