000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:02 executing program 1:

21:36:02 executing program 3:

[  499.905049][T17970] EXT4-fs (loop4): bad geometry: block count 262144 exceeds size of device (256 blocks)
21:36:02 executing program 2:

21:36:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000005000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:02 executing program 0:

21:36:02 executing program 3:

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:02 executing program 1:

21:36:02 executing program 2:

21:36:02 executing program 0:

21:36:02 executing program 1:

21:36:02 executing program 2:

[  500.078603][T17987] EXT4-fs (loop4): bad geometry: block count 327680 exceeds size of device (256 blocks)
21:36:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000020000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:02 executing program 3:

21:36:02 executing program 0:

21:36:02 executing program 1:

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:02 executing program 2:

21:36:02 executing program 0:

21:36:02 executing program 1:

21:36:02 executing program 2:

21:36:02 executing program 3:

21:36:02 executing program 1:

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  500.299059][T18003] EXT4-fs (loop4): bad geometry: block count 2097152 exceeds size of device (256 blocks)
21:36:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000021000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:02 executing program 3:

21:36:02 executing program 2:
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180))
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0)

21:36:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:36:02 executing program 1:
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00000000000000, &(0x7f0000000800))

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:02 executing program 3:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8})

[  500.492859][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000067
[  500.511981][T18025] EXT4-fs (loop4): bad geometry: block count 2162688 exceeds size of device (256 blocks)
[  500.512593][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000078
[  500.530615][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000042
21:36:02 executing program 2:
socketpair(0x1d, 0x0, 0x80000000, &(0x7f0000000000))

21:36:02 executing program 1:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x1)

21:36:02 executing program 2:
bpf$PROG_LOAD(0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  500.539429][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000016
[  500.554770][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000003b
[  500.563502][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006d
[  500.572305][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000015
[  500.583706][T18023] kvm [18019]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000033
21:36:02 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0)

21:36:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000022000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:02 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@huge_advise='huge=advise'}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]})

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:02 executing program 0:
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000080)="3518b9836aee2be3b7ec38dd6097d0367f154e28628b363688acd56a7ea06b84c2bb5407aa77cde04965690eff56ec04ff538e9d01f627a24420446b19ae962bd9e1b073308778cb85e253af144b330dd2744e8eb35b428b508682c72fe0e212278c63c7c3edb4e75972d2312e0ec54501759d3c1ec0cbba71fd2745e01f0a82546f720c6178e4efb24063bf0eeb6cc822f1851cd8163c75f767262ce3acedd29f41bfcb1ea406ad2b8015ac062d75e3badf", 0xb2}, {0x0, 0x0, 0xb6b}], 0x0, &(0x7f0000000800))

21:36:02 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @sack_perm, @sack_perm], 0x4)

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  500.727440][T18049] EXT4-fs (loop4): bad geometry: block count 2228224 exceeds size of device (256 blocks)
21:36:02 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140))

21:36:02 executing program 1:

21:36:02 executing program 3:
syz_mount_image$befs(&(0x7f0000000000)='befs\x00', 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000080)="91", 0x1}, {&(0x7f00000002c0)='Y', 0x1, 0xffffffffffffffe1}, {&(0x7f00000003c0)="03", 0x1, 0x2d3b2e85}], 0x0, 0x0)

21:36:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000023000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:02 executing program 1:
syz_mount_image$befs(&(0x7f0000000200)='befs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380))

21:36:02 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:02 executing program 1:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x126042, 0x0)

[  500.872262][T18062] XFS (loop0): Invalid superblock magic number
21:36:03 executing program 2:
socket(0x1, 0x0, 0x9)

21:36:03 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/138)

[  500.946796][T18073] EXT4-fs (loop4): bad geometry: block count 2293760 exceeds size of device (256 blocks)
21:36:03 executing program 0:
syz_genetlink_get_family_id$ipvs(0x0)
syz_io_uring_setup(0x7326, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), 0x0)

21:36:03 executing program 3:
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00000012c0)="e450f1aad20d8b2acf4898d8b784aa9b1257295236b2d14d15cd5fb6c0329a95bb03d02c2f05c121987201084c67c4dcb9073b707d1f87399a07beb213a63eca0ad99327a7b5453504079d50124301f988fd0b12e60d9b3f327f9a73a238d54a33e58f504925", 0x66}], 0x0, &(0x7f00000006c0)=ANY=[])

21:36:03 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:03 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000024000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:03 executing program 1:
r0 = io_uring_setup(0x5041, &(0x7f0000000240)={0x0, 0x96ee})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000002c0), 0x1)

21:36:03 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581f000cff000e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28)

21:36:03 executing program 3:
socket$inet6_sctp(0xa, 0x3598ab6ac31e14ac, 0x84)

21:36:03 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:03 executing program 0:
syz_io_uring_setup(0x40005976, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

21:36:03 executing program 2:
r0 = socket(0x2, 0x3, 0x1f)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))

[  501.144569][T18115] EXT4-fs (loop4): bad geometry: block count 2359296 exceeds size of device (256 blocks)
21:36:03 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c68abbb"}, 0x0, 0x0, @planes=0x0})

21:36:03 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000025000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:03 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))

21:36:03 executing program 1:
bpf$PROG_LOAD(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

21:36:03 executing program 3:
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1080000, &(0x7f0000000680), 0x0, &(0x7f0000000800)={[{@logdev={'logdev', 0x3d, './file0'}}]})

21:36:03 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000580)={0x4, 0x46}, 0xfffffffffffffe36)

21:36:03 executing program 1:
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000800)={[{@logdev={'logdev', 0x3d, './file0'}, 0xa}]})

21:36:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000))

[  501.350379][T18144] EXT4-fs (loop4): bad geometry: block count 2424832 exceeds size of device (256 blocks)
21:36:03 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023aa7c7223b75b7534f39fecf8a2e74cbd2704c968653e42017090c47fc55853f2e27585d788c2b4474e0ef46a712213a2ef16a8a3dc354af45e60ad1717e4326c5698fb67b721f4b1e5947e96c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:03 executing program 2:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2441, 0x0)

21:36:03 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000026000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:03 executing program 1:
bpf$PROG_LOAD(0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

21:36:03 executing program 0:
r0 = getpgid(0x0)
sched_rr_get_interval(r0, &(0x7f0000000000))

21:36:03 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001fc0), 0x4)

21:36:03 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  501.566985][T18165] EXT4-fs (loop4): bad geometry: block count 2490368 exceeds size of device (256 blocks)
21:36:03 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023aa7c7223b75b7534f39fecf8a2e74cbd2704c968653e42017090c47fc55853f2e27585d788c2b4474e0ef46a712213a2ef16a8a3dc354af45e60ad1717e4326c5698fb67b721f4b1e5947e96c10ed2b80a86af8c5bd0304a0d7"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:04 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0)

21:36:04 executing program 0:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9af61574ad43bf6f7abfee576302c1a62059d6ac6a7db79c91e3792bc24528eb"})

21:36:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000027000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
accept(r0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

21:36:04 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:04 executing program 2:
clock_getres(0x6, &(0x7f0000000100))

21:36:04 executing program 0:
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x81, &(0x7f0000000000)=ANY=[])

21:36:04 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  502.352701][T18194] QAT: failed to copy from user cfg_data.
[  502.378399][T18190] EXT4-fs (loop4): bad geometry: block count 2555904 exceeds size of device (256 blocks)
21:36:04 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x40001, 0x0)

21:36:04 executing program 1:
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20)

21:36:04 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000140))

21:36:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000081000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:04 executing program 1:
syz_mount_image$befs(&(0x7f00000002c0)='befs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000500))

21:36:04 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023aa7c7223b75b7534f39fecf8a2e74cbd2704c968653e42017090c47fc55853f2e27585d788c2b4474e0ef46a712213a2ef16a8a3dc354af45e60ad1717e4326c5698fb67b721f4b1e5947e96c10ed2b80a86af8c5bd0304a0d735b3b14c2c0d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:04 executing program 1:
perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  502.566438][T18216] EXT4-fs (loop4): bad geometry: block count 8454144 exceeds size of device (256 blocks)
[  502.604580][T18206] XFS (loop0): Invalid superblock magic number
21:36:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000086000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:04 executing program 3:
msgget(0x1, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000007c0))

21:36:04 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00'}}, 0x118)

[  502.736332][T18206] XFS (loop0): Invalid superblock magic number
21:36:04 executing program 0:

21:36:04 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:04 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "46094710"}, 0x0, 0x0, @planes=0x0})

21:36:04 executing program 1:

[  502.810668][T18246] EXT4-fs (loop4): bad geometry: block count 8781824 exceeds size of device (256 blocks)
21:36:04 executing program 0:

21:36:04 executing program 1:

21:36:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000000bf000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:05 executing program 2:

21:36:05 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:05 executing program 0:

[  502.975304][T18264] EXT4-fs (loop4): bad geometry: block count 12517376 exceeds size of device (256 blocks)
[  503.032223][ T3789] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  503.590623][ T3789] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  503.599689][ T3789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.613584][ T3789] usb 4-1: Product: syz
[  503.617745][ T3789] usb 4-1: Manufacturer: syz
[  503.628497][ T3789] usb 4-1: SerialNumber: syz
[  503.691331][ T3789] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  504.379877][ T3789] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  504.584458][   T54] usb 4-1: USB disconnect, device number 10
[  505.429596][ T3789] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  505.436510][ T3789] ath9k_htc: Failed to initialize the device
[  505.442580][   T54] usb 4-1: ath9k_htc: USB layer deinitialized
21:36:07 executing program 3:

21:36:07 executing program 1:

21:36:07 executing program 2:

21:36:07 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:07 executing program 0:

21:36:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000020000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:07 executing program 1:

21:36:07 executing program 3:

21:36:07 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x401}, 0x14}}, 0x0)

21:36:07 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x78)

[  505.764155][T18293] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  505.774402][T18293] EXT4-fs (loop4): group descriptors corrupted!
21:36:07 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000030000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:07 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000010500)="ff030400fc030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x2000}, {&(0x7f0000011d00)="ffff01", 0x3, 0x12000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410081, 0x0)
pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x2, 0x20)

21:36:07 executing program 2:
pipe(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000040000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffff", 0x21, 0x1000}, {&(0x7f0000011500)="ed41000000080000d302005ff4f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x75e)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)

21:36:08 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b4c6ae9f3060e20c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6be4557cd4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9d441d40549db6d4a4762e5cc23dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6d1afd8c1cc3eb215ba22f43115e2219dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba3973aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b33d6621bdf2c17bc04000000000000007023c4006200607a9a07e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a755761fe46169b2b5b8cdedad95cc425fe203d2f2655a76865c2cb4e2470fceb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864487366d6d7ee7bb0749cacf56cf27409c60fca2e2981b22d08f874e0a9cb6fca7844f9dab530388eb1f43d4abbfc59d6f1b18fe380df4bf024f120bd715d82033f2fb7d8fc9e0d77b294e097e293db58992c0024ab2fd8e5e7003af92d11de48e8b4d32972cba6f49051cec1bf6f16231bbb90a2d201e5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde2480ae40d6156edc4ef89a1a3d960417b598c24f34a5ba9a4a2039d0416e3f83074192c48c63384f52b8eeb70571e5bbb3e6d2b5eba52bee6f81968981811f832d064048c0e0bbe46984b2f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f0889f4ee8964875fea6ff5577ba6ae681300004f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc349ab96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953de70e7ce0311c8b018956f8a42ca26ab295f1ecf617a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e57a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7a87c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf080de1f87808d0711dd76b359573"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

21:36:08 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x41, "4fd4c87dc5610382e0904d09a180cf1937e9e25278ccdf3a487d8413478fd0319f832a34be01851d11c803b8bb9ed70eb84cafa81ebb94f54c7928371afdb17128"})

21:36:08 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  505.914250][T18309] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  505.950307][T18309] EXT4-fs (loop4): group descriptors corrupted!
[  505.970076][T18314] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
21:36:08 executing program 3:
syz_emit_ethernet(0x133, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100300086dd6000000000f90600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000c30e6b8e390ac26cfaf3e6aede0000008000000000af4385a1b547160ad057713d826fac2fab0eef3423a13160d90989eb91570a5527be79db8d3af2acf0f1045f9a1abe09000000000000004e0000005b962774d1a232eee2a70ce67fde860d54bdc4253aa7f595c3a270ed8721c1a79d4987a5de5505e626aa0302352162c97b4add219f603bdbd153e9eb1ac00da998cb5805dbf95d7ab8e84af882160de051827b5c6b04a4d13f0115f8c80400819787b7c1a1680dd59245aab9182dec76b6626472d7a340942da707f421f59a3e6769906447d541d9c96918eef824fadb88da980006"], 0x0)

21:36:08 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000040000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:08 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10000000000000d)

[  506.011612][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 264
21:36:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x42, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14)

[  506.071138][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 265
[  506.096651][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 266
21:36:08 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040))

21:36:08 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x33, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14)

21:36:08 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  506.127965][T18340] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  506.148014][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 267
[  506.180342][T18340] EXT4-fs (loop4): group descriptors corrupted!
[  506.212770][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 268
21:36:08 executing program 1:
io_setup(0x4, &(0x7f0000000000)=<r0=>0x0)
io_setup(0x800, &(0x7f0000000600)=<r1=>0x0)
io_destroy(r1)
io_destroy(r0)

[  506.260641][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 269
[  506.273971][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 270
[  506.286264][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 271
[  506.298562][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 272
[  506.328889][T18314] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 273
21:36:08 executing program 2:
pipe(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000040000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffff", 0x21, 0x1000}, {&(0x7f0000011500)="ed41000000080000d302005ff4f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x75e)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)

21:36:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:08 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

21:36:08 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:08 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000050000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:08 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000680))

[  506.702548][T18378] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
21:36:08 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:08 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0)

21:36:08 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
mount(&(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'U+'}, 0x16, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001200)="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", 0x1000, 0xfffffffffffffffd)

21:36:08 executing program 1:
semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
r0 = semget$private(0x0, 0x207, 0x0)
semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)

21:36:08 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000210000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  506.745301][T18378] EXT4-fs (loop4): group descriptors corrupted!
[  506.775991][T18388] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
21:36:08 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  506.882228][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 264
[  506.933361][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 265
[  506.955769][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 266
[  506.989601][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 267
[  507.005954][T18406] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  507.006851][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 268
[  507.029310][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 269
[  507.041565][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 270
[  507.053947][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 271
[  507.066242][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 272
[  507.078512][T18388] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 273
[  507.110061][T18406] EXT4-fs (loop4): group descriptors corrupted!
21:36:10 executing program 2:
pipe(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000040000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffff", 0x21, 0x1000}, {&(0x7f0000011500)="ed41000000080000d302005ff4f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x75e)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)

21:36:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:10 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

21:36:10 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:10 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000220000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:10 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
socket$inet6_udplite(0xa, 0x2, 0x88)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
mount(&(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'U+'}, 0x16, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$revoke(0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001200)="7dbecd34b00fc810a591b103db1c27ab1c3b03e3ff728e157cb41430be42dc95004628e3dc975627a9c0c3d9c4ef7867002f9426dc22b9fe4b43e29eab2838588e78d6a6fa290540b0e465305cf06cc06498684a1b446d0347b23401c66dbbfb0148ed2a1e88e64694a632c9ff1bba8c40c0ea3ce58e87556bda389e499d8409e47af6882f2d496e0c221a584373f9b994bc794b00fcc93ca0b1bf57a8647badd1b05f107d6603faaee60b91456d238d455abebb31750b70fea62f908a284759647c3a93c9a78d751163791c287a490d5f3d52c132840b1f335dab07bcc77890633afdf28e3dd40dc8f08920cf4f178a7b7463bf52e0038f0aac3459de4925e21e2b4bd0d23e6cf5e561ef687a9aef619201e053617116b7c475cd9efb8d0d3ac2e608fae5d9341fe338f3d691eaaa33d8b62c535984f6499466a8e86cd96c215c04c67d4deaab1a61ec571bf142e2a30ac223c8a23b35296919d9f7507185c1effec6f77ec472d6482972e693a715d377806e6bbb2b6cd0d52f1ef5bcb261afa8f192ab483c3861f5c5e39aa1f31a9e07715344009be889bda5914c87425d30f34b6fe25071d2df357d886fc536c7d1f25030ec1434b0bb5133195f4eecfa575e8d22946c4b3511f63e7805954d7a38b4f04d0be39950c272596ce520909f41e5e1571af4bc16310bec5fc778091a7b93a4b7be2d70f6a70cd06bbe88c927519135492e109a86a30212e67d19ec2cdc768c049a2bf94b72e927e6943bf2780433c03982b6970eae11101f275088ce81c7fe3f2c3ef6a9318480e00f629d33e227e7bb8d8033a7bd8f55c1ec8f6c52ebb22d968ccbb880b9ea0a2c164b23d16061d8f6d4d86a4cdbbb1b1cb414781da1fcf3e2c66a0ddaee8a5d5a30286f3c151a9f644a02115316909808e2e5341a62de3c176ece013b84a4d7638fc3da4ba916de174d6d05dc986d23d5ed3cf403c2c85b958a26be741a926a7e4fdd8032c81ae07b4f75fa7a456284fc187a08783b1748ca0722f3a1a1eb2fdcc1a21a565eb3aa797d382c075ce58cb2af58194933fd5e2c5717bef8b6e3ca43072bf3b7eb2cf2b53424306ba48d1862b02cab576dac4ff17ba31c0a844a32a271a560459059b120cd42b86f5dd563440e0e8400d74185816c07c2b7420bbd17dcefc91932bbc5f0cd69120471210ea1b05f7928af568aa70d6d83c2b269c4afa036b54e7016fdfd69cb38ae661ada72a6b13b856362422c5846ee22115088b9184221b3e08805edc8a09e2cbd277e33eb1ad3a315cc46f3bdcff95be77c398175bb51557666a5ba65597a1c9c70fcf254d2a57d566b3aa6b989a32f45b2461a265fc2b5f3c18f52134f9994bd43055112f6f254a949884c367ae1ca5074807ab8cbdcb8212da9f412445b559666cfc97eb5bdb85dd007ee7a1820b5c50276d939f1b54a3c7f6c407dc8e99e2e346c3a083ef3c5aa3c5cdfca68d5ecbdd8a777b09c2703b6fbcee45ec6d92d01c2c23738be1f99f981a7bc0467937be1b64148649eadc5e5b999a076281df3c22e6b8490e50a44add772831e3e60ba11428ccc297a86cbbae59fb9b8a7f426c5c44f41c88d6392c5fd1a98296217aa978d006ead98293fb8239cc4e2ef559d342170b009a110a27adec7312bbf49cfb13e088d96894eb5cafd87d374f076b7eb3d3e2610e20d3c07a4fd32851eda3307a69d133e77a305df2f620f7e24d67eea61cefb2f9f7d64b2e6a355bd2129881f1a9e367a8233086e49add24f48cdf75be97d635fede63e975e4418c2147fdff96eca5e8c580167cf3be7545b80f5b922e8d764162df578129814f7673c3d043199b3bb178870bcdf8ab7ac55c4e31a4e42d5c0f2b815621bffc5d60752687a18319f84da53147e4da3fb24f5306ef0616e69f1a07ee8e1c344e6f0b73521d4d78d7273b0849df670a08ca7a84ea9054729a43df8d5d2f4770ad61b5dd5b27871f767c1e729d2f4ec761ee8dbe1d2747ffbd10e7d329900813ea508cca4a797a9f1394ca0d3ba435e3fcf959b3ec3bbf1bfdfb8ed0fb2fe0c55a59441f7b32920afecdf5cc5307e5304a266fdbdcc404de21843c479fd0768215bba556d46e8cf721ae73d50525decb7d46cf65b4de7af9d4e89504e2549d4b43d6ba149a4b574946af31fb1435ca53c18a9723c311b4ff6611e3032d658d20ae2a1defeaf3a6b6903fec3d9e2e839a2eb284700d1fa4836ebc5b20adc1a0668d7ee27378f348ecfbc8e8bcf70368fc5f3d81a62a7fee1e8fa1d3a970c724e5491753d16e633f2d747a2e356c82560308463b8a1d3500943c77ab1a4494732cd8056107d3b66ddefa055d91fd988ef45ee34e13602b43b332fa07f07c3cb759333224f6e5db32bc14335ad2bf87eb91adf1c31e99869c61476c932aa18681ad0c3edd4fbf8d4fd7d8b093373db6ce3ac0e5e3c351e78ee70f1b56cc058f67c6e9dcbc9146864cd4d51c6dceeb9b52a04e63daaaa0a7b093f2324884ef3cc3cb4e9ff2b3f2bfe25b72be4129f03ef475b88b15c18008ff2b2ba7bd52cee4a01a36e9dc74c7039c2ed09a096d438b587351961c5b47d999c3a65329d403d94cedcf8a8497088f015e66c6547e5124b64b33a2637f42feb1e0c321c7b710d0894d4ddb6ed9a41a16dab4687763bfedbae36a9edf532cf091cca3c5dcfd8cedbbd7527eca0f5a605eabcffdf03226129d2e97ad51bf4978aa8b2af930eee82f487b51bf58749b11be5dbb809f39385116e70b72852be5fbe2194b2e4b3950dbbc29f0a975152be70f73887274ecfa08908a6786b3c7d0040fda2bb84df05685276bac76b33eeae8f705631d9de3eb4446c9a5678ad9c89e85f9e5ccef975ee3af4d00cb2e25142b36c438bc3f74391510c0c4a843deffa1cbe047018f4c49d1045ecf0c9a81042203fdf91174006ab414fa30a6c5b948cbd1cdb30ce1a93dba0d7e2f06fce0c9c4c0cb621a282ef9e2a4ca349ee049757388d6370bdb36c2fe7ffa11fdc6fdbaaa37f88ff52cebeceb344ac7d50f31eb59197cec977b94c93d1e690d787eca46d3a721fc8ff36b2c0077da89e6fec71f0ee3bd582b1eae03c6791a9d7a10dab28255a65403a627f2511b97b8d36572e489203e0f8f2a00006d46500e6f53f39f251966936953a7bba6deb4703c33925a2c8b3beb339cb9716d25688fd88e877e4dd2f9ef894a4b88e579865efa9a236a3eac39ff6b0e0a20929d79fbca5e60a50b4a9a2d409faf1f4a855d4ec3d9c7abb08c8e30dbd6d0fabac22cff91e7f36c3f8994a0ea48ccf3181bc534a2cffc78930903094fdd799fc28afed6fd480c4f8590b6da10dbcd34906a4bd209b1ad987a68b30dba9f176bbdade35a2742d2f957defb948825db75c764288527bf56f6a9d553903d47ebc09d056b34a459c6358787ea16e604cf1021a0700f19d3c693e0974d751654074478fe47551e7df756105d5a73bca96fd2ba11bcccf0e953c9646328d82bcac6f87b9e697327bd099cfb53d4a676e2e9fdcb40a0feedb270f420e1cd2c7066e085677e31333a4b9df2a8c85b39eb65b2dc0e9bbd05e197c7f028d90de31068326ac160cb45b76f2535188c57ca8ea4466b3789a8fc80f6346c972485c87879e07adb748606b3e905beab2404f0a5b8d0e98b3539a3a369b8076c19b54ceedaaf422a73b83bf7e1bae56f986c10a733c8bdd68c205651c7009ac57f8683c9b83ab0e3ed7b16f02ed5c8df4e917f3d3ec83c7c8e628bae064284b548260d13c47fac8a1623352fb8c378fa97ce75044db2afe5974601fa6d928217453af6f88f32892d9fdf770c0aad9b54bc0967ad455de9e94322d63557e37adef694565ee37c6e42b423aa93fe940df15cf31df507b7b23cb6663e7259a862a678407c121bbc170c244e296da809549b42de4d2feb92f10d42081822015aacd6662076489979894529293726bc5a4a55cf2d1199485a83865919aebb3a43be55568be6e49ea4a3a197981840848559760db7ff2c103587599ff4c24a46433239e71f388d6f3a4e0ef3c512222ad805da56093e973a5384bbb0d2a2d61b4be981a997d72ea1646b5b4087fab4c27c0be56facc71368d77546312c4ef0c7da86555d7f7d561e3972fea97e04639162821e59e90045e0c787b84f5ad5f51c2156820da11e428ded752ad46e335a06ad2822ce1f4bc2c5c3d2e36971d938a9a327f417b9b3f6c4a11b97dcad5a2918414b59da9b1c8c2a6943c27b395b69fae54dd354fd3065e0d844b797eb1a98389f2fea908f3670e12bddc77c23680d344bf9ebe8c7e4a127200bef4497169629577afa30e9dd2fb86c339b01f62a107a75bebd7e9758dc5040c621efdc415bb4c74f1239fd02c9de8c6fe4428675dac178b63b432a28560ca5ad058ad33f0dd838fc0a85110aae303b48d9cc09a6a9ea2b00dee8392996d99524e587068a01fb506475e964267b650c9be5044d18f0f92f13206b38153103d3a2f9cc37d027f67675ba5a5e152626f7c4b8384d116e2b98deabc3a6d7dae522e20b708b42c7bff190eefe1e48520b4bb4015b3acffa5aa172a7a941e903fd86a7b06e7072080e7282669586f6e2cef12d9a0a584b606bacf6837fd7aed0fbd6e359f5a069042d63efe591ca018e1880bdec0da9e5783acaa665158787b5b36a497d96f32f72aacfa0b5f550752a0f01195f122adc6e89a436718e8738c0ac16aef7ceac8a18b488771bb09c8c6094127d8c882e4e9af4177dc752a61f1e75e59894327be42dd41613f919804a03f90da2ef0da3053068751f522b0b599417c98061f2f32062f43470c00c09d261f15d1b8e0f25b1b455b9b5cb01c058c52008be238d1c8d9d8652a510e85a5435768b3d32ee9e72267b28a06cc992db84506506b87d4a6f4c46317324a5023e023e79eea2ee13516e13a9833a86c53cf9b66697048955ff82766686d244606541db72cce8dcad6139d294d7dfd602dd152c31ffc7080ecbdcd2fdbb407c702d8fa8839f32b4dba5752573f5ed96b01c9f6b8dbb924a3103ec1562fd7484614a5d89864db2ef702bd925c2b3b87fa94739db1aa8e5fc7c53f4bfc4fe010cab036329efd91a311a1674fe025bcc18f0f26d38d8da1577a2c6873a14020e468926f03a53bd14c79a792869ddf20cc0fe317133f4fcf78624392e97d37f403bf82b01f05b5482581d13aae8b2f1ff6754e632a2b78f0b5a4081668ba4cbefb8049a27519fed00aa02e74f163c9de83b10b060db2390b8161d9c5a5f6723258dd4411bbf993ed2c223e4596747006b6ddea90797535f65a968255cbe781f6caead309206425bab41a246e8a18996f20a69a169257e6c9910bcc567a0584f223dfb38f40ce0fa2814297cf775a1998ee7444b02b28a9f0fcdf7935576c662e40bdf0227db1f8f16cd0a2b5e8d980a96c67d6547d43136ac3351783a5ba829493f769c062b08a4a34e37dccfa1a6587dd8bb7c0f3a1d49ceca9a1e33e8ede7ed861a7f1afde6b4d7cf5d1af151e0891785de4eda5a83c15417f71d23e80a93f75d362830724d540f226292b2d2ce550dd774c8c7289f43133ee225c8235fcea28be3b57a451034172998eb758df96c2e95d713101cea242f7c9e20cb552a35a7788524a96e8e029e6b1b5df4df7ec95e30d76868e5400b31d5f296e89dd8171c6530309a64b2d16e9b5b2c7b166433112cf76260aab475e8b7cf4fcd3b569a7f5c6e9f27f452b15b2792d3308040b518c5197f996913a967627365b328f8c64e912546798c913d7d231", 0x1000, 0xfffffffffffffffd)

21:36:10 executing program 1:
fanotify_mark(0xffffffffffffffff, 0x1b4, 0x0, 0xffffffffffffffff, 0x0)

21:36:10 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000010500)="ff030400fc030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x2000}, {&(0x7f0000011d00)="ffff01", 0x3, 0x12000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[])
syz_genetlink_get_family_id$ethtool(0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410081, 0x0)
pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f13713f08dc", 0xffffff30}], 0x1, 0x2, 0x20)

[  508.107308][T18432] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
21:36:10 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  508.176656][T18432] EXT4-fs (loop4): group descriptors corrupted!
21:36:10 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r0 = socket(0x11, 0x800000003, 0x8)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getpeername$netlink(r0, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x17, "9eaea2331aaa9409b8b1e3baa5f9046bc3bcb4edc0007b"}, &(0x7f00000002c0)=0x3b)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1)

21:36:10 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000230000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  508.243540][T18442] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  508.265516][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 264
[  508.332152][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 265
[  508.355465][T18455] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  508.369708][T18459] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  508.377119][T18455] EXT4-fs (loop4): group descriptors corrupted!
[  508.409010][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 266
[  508.449374][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 267
[  508.530688][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 268
[  508.590443][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 269
[  508.633965][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 270
[  508.681504][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 271
[  508.730782][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 272
[  508.773264][T18442] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 273
21:36:11 executing program 2:
pipe(0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000040000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffff", 0x21, 0x1000}, {&(0x7f0000011500)="ed41000000080000d302005ff4f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x75e)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0)

21:36:11 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:11 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000240000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  509.378121][T10762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.391436][T18473] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  509.402131][T18473] EXT4-fs (loop4): group descriptors corrupted!
21:36:11 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  509.513367][T18479] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  509.538209][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 264
[  509.551693][T10762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.604864][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 265
[  509.672966][T10762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.685557][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 266
[  509.728574][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 267
[  509.764013][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 268
[  509.792496][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 269
[  509.807544][T10762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.828354][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 270
[  509.857836][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 271
[  509.892764][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 272
[  509.938190][T18479] EXT4-fs error (device loop2): ext4_group_add_blocks:5609: comm syz-executor.2: bit already cleared for block 273
[  510.943188][T10762] device hsr_slave_0 left promiscuous mode
[  510.949885][T10762] device hsr_slave_1 left promiscuous mode
[  510.955913][T10762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.965541][T10762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.975093][T10762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.983723][T10762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.993041][T10762] device bridge_slave_1 left promiscuous mode
[  511.000196][T10762] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.008952][T10762] device bridge_slave_0 left promiscuous mode
[  511.015182][T10762] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.032050][T10762] device veth1_macvtap left promiscuous mode
[  511.038091][T10762] device veth0_macvtap left promiscuous mode
[  511.108176][T10762] device veth1_vlan left promiscuous mode
[  511.113963][T10762] device veth0_vlan left promiscuous mode
[  514.298598][T13170] Bluetooth: hci3: command 0x0409 tx timeout
[  516.378412][   T17] Bluetooth: hci3: command 0x041b tx timeout
[  518.458195][   T17] Bluetooth: hci3: command 0x040f tx timeout
[  519.023116][T10762] team0 (unregistering): Port device team_slave_1 removed
[  519.033032][T10762] team0 (unregistering): Port device team_slave_0 removed
[  519.044413][T10762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.055754][T10762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.082666][T10762] bond0 (unregistering): Released all slaves
[  519.135029][T18537] IPVS: ftp: loaded support on port[0] = 21
[  519.183815][T18537] chnl_net:caif_netlink_parms(): no params data found
[  519.216479][T18537] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.223616][T18537] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.233502][T18537] device bridge_slave_0 entered promiscuous mode
[  519.241527][T18537] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.250680][T18537] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.258472][T18537] device bridge_slave_1 entered promiscuous mode
[  519.275924][T18537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.286749][T18537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.305657][T18537] team0: Port device team_slave_0 added
[  519.312674][T18537] team0: Port device team_slave_1 added
[  519.327533][T18537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.334799][T18537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.362311][T18537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.374255][T18537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.381284][T18537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.407186][T18537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.430063][T18537] device hsr_slave_0 entered promiscuous mode
[  519.436720][T18537] device hsr_slave_1 entered promiscuous mode
[  519.445407][T18537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.452986][T18537] Cannot create hsr debugfs directory
[  519.489310][T18537] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.496355][T18537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.504633][T18537] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.512145][T18537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.547874][T18537] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.561100][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  519.569529][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.577315][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.601525][T18537] 8021q: adding VLAN 0 to HW filter on device team0
[  519.612157][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  519.621638][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.628757][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.648659][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  519.657034][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.664081][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.675218][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  519.694235][T18537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  519.707503][T18537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  519.725203][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  519.733044][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  519.743781][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  519.754225][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  519.764679][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  519.780178][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  519.787541][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  519.803306][T18537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.847467][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  519.868480][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  519.876738][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  519.889854][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  519.901336][T18537] device veth0_vlan entered promiscuous mode
[  519.912147][T18537] device veth1_vlan entered promiscuous mode
[  519.927347][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  519.937421][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  519.945874][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  519.957359][T18537] device veth0_macvtap entered promiscuous mode
[  519.966074][T18537] device veth1_macvtap entered promiscuous mode
[  519.979046][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  519.989566][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.005491][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  520.016187][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.027327][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  520.039115][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.050171][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  520.062405][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.072334][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  520.083004][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.094905][T18537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.103386][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  520.113171][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  520.123928][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  520.134589][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.144682][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  520.155342][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.155356][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  520.155361][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.155371][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  520.155375][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.155389][T18537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  520.155394][T18537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.156667][T18537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.237798][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  520.285338][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.297719][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.329736][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  520.347064][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.355666][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.368732][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
21:36:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x32)

21:36:22 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000250000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:22 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x7003, 0x0)
ioctl$RTC_SET_TIME(r0, 0x7002, 0x0)

21:36:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:22 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:22 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000002080)='tmpfs\x00', &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003200)=[{&(0x7f0000002100)="18", 0x1}], 0x0, &(0x7f0000003280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x0]}}]})

[  520.502616][T18778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  520.516433][T18778] EXT4-fs (loop4): group descriptors corrupted!
21:36:22 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000260000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:22 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ec0)=@nat={'nat\x00', 0x62, 0x5, 0x450, 0x110, 0x110, 0xffffffff, 0x110, 0x2c0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @private, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x4, {0x0, @multicast1, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @icmp_id}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28, 'cgroup\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @broadcast, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

21:36:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:22 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:22 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x11, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14)

21:36:22 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa113, r0, 0x0)

[  520.635811][T18805] xt_nat: multiple ranges no longer supported
[  520.647053][T18808] xt_nat: multiple ranges no longer supported
21:36:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x8, 0x0, 0x0)

21:36:22 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x1269, 0x0)

[  520.744295][T18816] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
[  520.756170][T18816] EXT4-fs (loop4): group descriptors corrupted!
21:36:22 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:22 executing program 1:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000001c0)={0x6, 0x1d, 0x0, 0x0, "520aa4dd9b3c13ad3e1c864916871c4edf7268fcc514419fda976da1dde85634"})
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020005491d, 0x800007f}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r0 = socket$inet(0x10, 0x3, 0x0)
socket$bt_rfcomm(0x1f, 0x7, 0x3)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008002f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="14aba02e95c8c0408265", 0xa}], 0x2}, 0x0)

21:36:22 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
read(r0, &(0x7f0000000380)=""/233, 0xffbe)

[  520.876826][T18830] NFS: Device name not specified
[  520.892218][T18832] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
21:36:23 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000270000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:23 executing program 1:
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
select(0x40, &(0x7f0000000000), &(0x7f0000000700)={0x34}, 0x0, 0x0)

[  520.920484][T18837] NFS: Device name not specified
[  520.939631][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
21:36:23 executing program 2:
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x4003, 0x0)

[  520.992294][T18832] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  521.004502][T18842] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 46)!
21:36:23 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  521.051161][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  521.081310][T18842] EXT4-fs (loop4): group descriptors corrupted!
[  521.961286][    T8] device hsr_slave_0 left promiscuous mode
[  521.988622][    T8] device hsr_slave_1 left promiscuous mode
[  522.025121][    T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.047915][    T8] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.066718][    T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.087692][    T8] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.101838][    T8] device bridge_slave_1 left promiscuous mode
[  522.110872][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.124579][    T8] device bridge_slave_0 left promiscuous mode
[  522.136281][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.148846][    T8] device veth1_macvtap left promiscuous mode
[  522.154836][    T8] device veth0_macvtap left promiscuous mode
[  522.163319][    T8] device veth1_vlan left promiscuous mode
[  522.169693][    T8] device veth0_vlan left promiscuous mode
[  522.790788][    T8] team0 (unregistering): Port device team_slave_1 removed
[  522.800016][    T8] team0 (unregistering): Port device team_slave_0 removed
[  522.810996][    T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.822386][    T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.848187][    T8] bond0 (unregistering): Released all slaves
[  524.243114][T18873] IPVS: ftp: loaded support on port[0] = 21
[  524.301373][T18873] chnl_net:caif_netlink_parms(): no params data found
[  524.332877][T18873] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.340005][T18873] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.348978][T18873] device bridge_slave_0 entered promiscuous mode
[  524.358331][T18873] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.365448][T18873] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.374249][T18873] device bridge_slave_1 entered promiscuous mode
[  524.389457][T18873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.400710][T18873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.418646][T18873] team0: Port device team_slave_0 added
[  524.425472][T18873] team0: Port device team_slave_1 added
[  524.439023][T18873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.446124][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.475116][T18873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.487076][T18873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.494097][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.520105][T18873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.541776][T18873] device hsr_slave_0 entered promiscuous mode
[  524.548503][T18873] device hsr_slave_1 entered promiscuous mode
[  524.554942][T18873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.562597][T18873] Cannot create hsr debugfs directory
[  524.595506][T18873] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.602557][T18873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.609794][T18873] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.618604][T18873] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.649540][T18873] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.662113][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  524.670010][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.680564][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.689005][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  524.704778][T18873] 8021q: adding VLAN 0 to HW filter on device team0
[  524.716451][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  524.728722][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.735885][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.758017][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  524.766438][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.774453][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.784856][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  524.794636][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  524.806492][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  524.817076][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  524.832188][T18873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  524.843396][T18873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  524.851891][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  524.866914][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  524.877170][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  524.890660][T18873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.927841][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  524.945776][T18873] device veth0_vlan entered promiscuous mode
[  524.952460][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  524.962806][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  524.971700][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  524.983124][T18873] device veth1_vlan entered promiscuous mode
[  525.000505][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  525.008452][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  525.016377][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  525.030178][T18873] device veth0_macvtap entered promiscuous mode
[  525.038743][T18873] device veth1_macvtap entered promiscuous mode
[  525.052254][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  525.062738][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.072841][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  525.084085][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.093988][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  525.104439][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.114283][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  525.125015][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.136300][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  525.146886][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.157923][T18873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.166620][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  525.179024][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  525.191208][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  525.201722][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.211911][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  525.222559][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.232485][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  525.242927][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.253998][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  525.265971][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.278854][T18873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  525.289523][T18873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.300735][T18873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.311969][T13170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  525.363248][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.371509][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.391102][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  525.401654][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
21:36:27 executing program 3:
r0 = socket(0x22, 0x2, 0x3)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10)

21:36:27 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000440000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:27 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:27 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c00701ae236ebd77a1644fb061b279351be00c032ee19be117ed03c40641e19b9c7d8281a45e422fc78c6ef4d3265cb808e88e348d68fbe5ff20b34248a02db8bbe587562ae3b3f144a47e51675226067690d05c697802d849e197c2e5be02aa9991f153af1d5dfd660dbeaa7080d68c23838dee82ad257715968ade78116d315565ec26a2f857904d8563aad13d4ce199643fea627bd2a0a5a2f6b2d33f6babbc5598afe54ca76bd20336147eb48638e37aea26ecd08d6f575decaf085f1b962758f8701f252e65e505a892ec4076fda"])
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./bus/file0\x00')

21:36:27 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x25e, &(0x7f00000019c0)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00c4c8", 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)

21:36:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  525.412043][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.420667][ T3251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
21:36:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000004c0)={0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0})

[  525.493909][T19111] IPv6: addrconf: prefix option has invalid lifetime
[  525.518178][T19113] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  525.527148][T19122] IPv6: addrconf: prefix option has invalid lifetime
21:36:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:27 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)

[  525.540076][T19115] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
21:36:27 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:27 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2021, &(0x7f00000069c0))

21:36:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:27 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0,'])
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./bus/file0\x00')

[  525.606840][T19115] ext4 filesystem being mounted at /root/syzkaller-testdir762036537/syzkaller.yuVBZK/1219/file0 supports timestamps until 2038 (0x7fffffff)
[  525.625590][T19126] overlayfs: filesystem on './bus' not supported as upperdir
21:36:27 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000860000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:27 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt(r0, 0x0, 0x0, 0x0, 0x0)

21:36:27 executing program 1:

21:36:27 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023aa7c7223b75b7534f39fecf8a2e74cbd2704c968653e42017090c47fc55853f2e27585d788c2b4474e0ef46a712213a2ef16a8a3dc354af45e60ad1717e4326c5698fb67b721f4b1e5947e96c10ed2b80a86af8c5bd0304a0d735b3b14c2c0de5c8cda6d72c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:27 executing program 1:

21:36:27 executing program 3:

[  525.813193][T19146] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  525.826526][T19150] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
21:36:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:27 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

[  525.861656][T19150] ext4 filesystem being mounted at /root/syzkaller-testdir762036537/syzkaller.yuVBZK/1220/file0 supports timestamps until 2038 (0x7fffffff)
[  525.870408][T19146] overlayfs: filesystem on './bus' not supported as upperdir
21:36:27 executing program 1:

21:36:28 executing program 3:

21:36:28 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0,'])
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./bus/file0\x00')

21:36:28 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 1:

21:36:28 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000bf0000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 3:

21:36:28 executing program 1:

21:36:28 executing program 3:

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 1:

[  526.100725][T19173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
21:36:28 executing program 2:

21:36:28 executing program 3:

21:36:28 executing program 1:

[  526.179288][T19180] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  526.196456][T19180] ext4 filesystem being mounted at /root/syzkaller-testdir762036537/syzkaller.yuVBZK/1221/file0 supports timestamps until 2038 (0x7fffffff)
21:36:28 executing program 3:

21:36:28 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000020100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:28 executing program 3:

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00'}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 1:

21:36:28 executing program 2:

[  526.297288][    T7] Bluetooth: hci3: command 0x0409 tx timeout
21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00'}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 3:

21:36:28 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 1:

21:36:28 executing program 2:

[  526.394822][T19204] EXT4-fs (loop4): bad geometry: block count 258 exceeds size of device (256 blocks)
21:36:28 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 2:

21:36:28 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000030100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:28 executing program 3:

21:36:28 executing program 1:

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00'}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 3:

21:36:28 executing program 2:

21:36:28 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 2:

[  526.589983][T19222] EXT4-fs (loop4): bad geometry: block count 259 exceeds size of device (256 blocks)
21:36:28 executing program 1:

21:36:28 executing program 3:

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000040100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:28 executing program 2:

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 1:

21:36:28 executing program 3:

21:36:28 executing program 2:

[  526.797012][T19242] EXT4-fs (loop4): bad geometry: block count 260 exceeds size of device (256 blocks)
21:36:28 executing program 2:

21:36:28 executing program 1:

21:36:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:28 executing program 3:

21:36:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000050100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:29 executing program 3:

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  526.988808][T19262] EXT4-fs (loop4): bad geometry: block count 261 exceeds size of device (256 blocks)
21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 3:

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023aa7c7223b75b7534f39fecf8a2e74cbd2704c968653e42017090c47fc55853f2e27585d788c2b4474e0ef46a712213a2ef16a8a3dc354af45e60ad1717e4326c5698fb67b721f4b1e5947e96c10ed2b80a86af8c5bd0304a0d735b3b14c2c0de5c8cda6d72c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000060100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:29 executing program 1:

21:36:29 executing program 2:

21:36:29 executing program 3:

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:29 executing program 1:

21:36:29 executing program 2:

21:36:29 executing program 3:

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, 0x0, 0x0)

[  527.213132][T19286] EXT4-fs (loop4): bad geometry: block count 262 exceeds size of device (256 blocks)
21:36:29 executing program 1:

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000070100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 3:

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077515d4b90b76412e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e64f9dc3f45f9f68d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfe9c6a05c07bb1f6c8b3e0be3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6c54c3fd8c1ce4a6478983583a5daefdad375254f5065f0f00d81f6af3ee2d6b38118abb552513683dc80ed165c4cc4d2241e65c32d8442896c1939100e0e535925bd0bf5c14f68e1eacd8444e7f9b0f0d3d05588c5f9858389a4e2f258562c533401381cbd04c8e91981dd93c63ec129aab559fa9ca491a1af52a7ef5637f5d59b5e5654f4997eda9d069f7c1ce1a01000000000000000000000000000000e641d6b7708413ad46c1f9ebe7e502c695800576b063820018e4a0d868c11d4e43e12025982ab621c83bd97d86769d4c42b19c96c412dd47518ba6c097d89e7e8cbe677596d3ba9cbefbe85072a38d2ecbfa5da69b445e69e28602d10f0ac190f73a827619efb65438f3866434e2fa08efe3a8fe33e82a4bfdf6ab37bc24a5276d40eb2023e4ad8cd1d5e7ff4d4f09a835386c18befb31d30888b611cf19ec88974dafe106eccd0d39d9c81ccb84ba0c2661508ab5367704000000000000004f2509a268bf9411e29bc4048bdde1194d91d19fa0a26b13586f02e6a5dda93055df019e848daf299157bcdf4551927a9003d41000c5ae657b9061bdfb5ba3f578fa16d71dd982f5f377acba36538364d908fcaf96bb0000000000519313fdbb35a8f96e7c1cbdab6370050c2f8a834989e0f07dee1dcfbcabbf6f863cb8d382d12f9e22d23ea8eda80574f084afd62c6cfc380cbdd29601e10bbaa2d9acbc853420dceaa776484531d0f0262cdc023aa7c7223b75b7534f39fecf8a2e74cbd2704c968653e42017090c47fc55853f2e27585d788c2b4474e0ef46a712213a2ef16a8a3dc354af45e60ad1717e4326c5698fb67b721f4b1e5947e96c10ed2b80a86af8c5bd0304a0d735b3b14c2c0de5c8cda6d72c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, 0x0, 0x0)

21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 2:

21:36:29 executing program 1:

[  527.430941][T19307] EXT4-fs (loop4): bad geometry: block count 263 exceeds size of device (256 blocks)
21:36:29 executing program 3:

21:36:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000080100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, 0x0, 0x0)

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:29 executing program 3:

21:36:29 executing program 1:

21:36:29 executing program 1:

[  527.589720][T19325] EXT4-fs (loop4): bad geometry: block count 264 exceeds size of device (256 blocks)
21:36:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000090100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:29 executing program 3:

21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:29 executing program 3:

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:29 executing program 2:

[  527.706542][T19338] EXT4-fs (loop4): bad geometry: block count 265 exceeds size of device (256 blocks)
21:36:29 executing program 1:

21:36:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:29 executing program 3:

21:36:29 executing program 2:

21:36:29 executing program 1:

21:36:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_journal_start\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)

21:36:30 executing program 1:

21:36:30 executing program 3:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  527.900772][T19355] EXT4-fs (loop4): bad geometry: block count 266 exceeds size of device (256 blocks)
21:36:30 executing program 2:

21:36:30 executing program 1:

21:36:30 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000b0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:30 executing program 5:

21:36:30 executing program 2:

21:36:30 executing program 1:

21:36:30 executing program 3:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 1:

[  528.081259][T19376] EXT4-fs (loop4): bad geometry: block count 267 exceeds size of device (256 blocks)
21:36:30 executing program 5:

21:36:30 executing program 2:

21:36:30 executing program 3:

21:36:30 executing program 1:

21:36:30 executing program 2:

21:36:30 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x0, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 1:

21:36:30 executing program 5:

21:36:30 executing program 3:

21:36:30 executing program 2:

21:36:30 executing program 5:

[  528.329036][T19399] EXT4-fs (loop4): bad geometry: block count 268 exceeds size of device (256 blocks)
21:36:30 executing program 3:

21:36:30 executing program 2:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x0, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 1:

[  528.377099][T13170] Bluetooth: hci3: command 0x041b tx timeout
21:36:30 executing program 5:

21:36:30 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000d0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:30 executing program 3:

21:36:30 executing program 1:

21:36:30 executing program 5:

21:36:30 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x5, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "46094710"}, 0x0, 0x0, @planes=0x0})

21:36:30 executing program 3:

21:36:30 executing program 1:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x0, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  528.532727][T19417] EXT4-fs (loop4): bad geometry: block count 269 exceeds size of device (256 blocks)
21:36:30 executing program 1:

21:36:30 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:30 executing program 5:

21:36:30 executing program 1:

21:36:30 executing program 3:

21:36:30 executing program 2:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x0, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 5:

21:36:30 executing program 5:

21:36:30 executing program 1:

[  528.711071][T19434] EXT4-fs (loop4): bad geometry: block count 270 exceeds size of device (256 blocks)
21:36:30 executing program 2:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x0, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 3:

21:36:30 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000f0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:30 executing program 5:

21:36:30 executing program 2:

21:36:30 executing program 1:

21:36:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x0, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:30 executing program 3:

21:36:31 executing program 2:

21:36:31 executing program 5:

21:36:31 executing program 3:

21:36:31 executing program 1:

21:36:31 executing program 2:

[  528.936089][T19454] EXT4-fs (loop4): bad geometry: block count 271 exceeds size of device (256 blocks)
21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000100100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:31 executing program 3:

21:36:31 executing program 1:

21:36:31 executing program 5:

21:36:31 executing program 2:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 3:

21:36:31 executing program 5:

[  529.115491][T19470] EXT4-fs (loop4): bad geometry: block count 272 exceeds size of device (256 blocks)
21:36:31 executing program 1:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 2:

21:36:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000110100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:31 executing program 1:

21:36:31 executing program 2:

21:36:31 executing program 3:

21:36:31 executing program 5:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 1:

21:36:31 executing program 3:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  529.322069][T19491] EXT4-fs (loop4): bad geometry: block count 273 exceeds size of device (256 blocks)
21:36:31 executing program 2:

21:36:31 executing program 1:

21:36:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000120100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:31 executing program 3:

21:36:31 executing program 5:

21:36:31 executing program 1:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 2:

21:36:31 executing program 3:

21:36:31 executing program 1:

21:36:31 executing program 5:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 2:

21:36:31 executing program 3:

[  529.560486][T19515] EXT4-fs (loop4): bad geometry: block count 274 exceeds size of device (256 blocks)
21:36:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000140100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:31 executing program 5:

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002600012a"], 0x24}}, 0x0)
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

21:36:31 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x100}, 0x40)

21:36:31 executing program 3:
getpid()
timer_create(0xfeffffff, 0x0, &(0x7f0000000080))

21:36:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/149, 0x95}], 0x1)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)

21:36:31 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x4020940d, 0x0)

21:36:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000300)=""/4101, 0x1005}], 0x2)

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  529.744949][T19537] EXT4-fs (loop4): bad geometry: block count 276 exceeds size of device (256 blocks)
21:36:31 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x1261, 0x0)

21:36:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000160100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000000c0))
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
accept(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

21:36:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

21:36:32 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x4c, 0x12, 0xe15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0xfff, 0x0, 0x9]}, 0x3, 0x1}}, 0x4c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

[  529.874459][T19561] encrypted_key: keyword 'new' not allowed when called from .update method
[  529.892167][T19571] EXT4-fs (loop4): bad geometry: block count 278 exceeds size of device (256 blocks)
21:36:32 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
flistxattr(r0, &(0x7f00000000c0)=""/186, 0xba)

21:36:32 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000))

21:36:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000250100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:32 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x301, 0x0)

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000))

[  530.050660][T19594] EXT4-fs (loop4): bad geometry: block count 293 exceeds size of device (256 blocks)
21:36:32 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000001c0))

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000002e0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:32 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

21:36:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000016c0)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}, 0x8080)
sendmmsg$inet6(r2, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}], 0x2, 0x0)

21:36:32 executing program 5:
timer_create(0xf, 0x0, 0x0)

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x58, 0x12, 0xe15, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x3, 0x1, "092f442e46c854e8"}]}, 0x58}}, 0x0)

[  530.204196][T19615] EXT4-fs (loop4): bad geometry: block count 302 exceeds size of device (256 blocks)
21:36:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000320100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070017001e70b5000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

21:36:32 executing program 5:
clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff037202000404000001007d60b6030000001000006a0a00fe39000000850000002b0000009c000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c458000000000000e3a94b574d2eb38a548355f0b886bd001362e64eae7f860db5808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b89bd9d5fdb68832e986440ff0a7edfa0cb231ccd00000000000000000000007777e27060493073807c4b7bbaed91f33fb382d91ae8e13bbe25120322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a02fa0892728807982d90e116bba29bb744af70a4cd8f3ad2db58bdd0b424ac416e66af9ebcfea905d37cf226312cb81ec843bcea06e7fa5e5b356dcf91fd2464cb130033d649d2110cf2e1f4682c24a314443c5e0807f0b1766ec7ecbd061772daa52a38539295d3fea7a7e669441e1ff041143edfa904fb43337f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cd7ce18b68bc37e061d33357d6a39d33c702576cc2a8881663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000000000000000000000000000009f1f5ab2e02739ccd50523d36032538f5cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a4b37032f1e8f6c673e514f569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2818206ce5fba6fca8b270d76191b43ab4cbdd4dbcccdc644fe658d5e8564b82f397ee7bd90a5fc16387bcb5e3df18d7d2a33c78cb8fe48ddcf6adfc9417bd42909ee4307c4197b15797af17845fbc02846d2f8543f65594cb5e06d538eb067b21111dbaa58b19a52f3f12880128d08eb477ad349c2214bc7f8378b7e5b5415f3da911411ed6655c6b66beaf92e416313dfe58e88fbfa825114227c2f6cfd1448ca37902a5678af7277e6cde25737b058ba3ca6068a000000f56b6f544f57ddc35f3c1b5904def348912e1eefe8164c3341b91913718593085d2a9a260663c11f5484cad2de673f9a1fcac868ff6cb20122f76531881165f4d46e1a23ce0dc462ff47e1fb4a8e2a1fabe97ec9c78c9123068c839dc2d825b82749063a85bf6c1bcf4ccf798e4962562c024f00000000000000000000000000000038b655016c5717a4cf8c6ea9b697b7d1964aeca4e43114c0fc8c8bc518b33ddd069f97d51ac5d0d063c5f58e9ee681f57bd662b1aa490b806b0c05912f68aacc936340ce13f621bbcaa029d015ef5ebec5f1f5f8a989b4e91b34c89b18cc01d72cce29f7542da7e4c56a5a758e88c18533475ed19fcb4887dd2c1c5b8b3ca254d093816e00479d3906a77c5591d7c69ab1b4120ad4357856d28594ce97da8380f0ca179bed28380eaab6e7328070774621bda6e3c067d8466f7a44a39a7e25d2fd609d1421bfaa18adaa33b390bc2652e493513a240136ab457d8f9f8dfec89c8ca511b195c02d3f871758970cc6dc0f6be898b19050d6bed21570075b297a73729815c4d9161609c2c401f163901a6344181c4761365f0984360db83ba4d61a78ee617e27a299348563ca9f424455dba94d0b2e2f4673375f601b39fae3187ef25d8b846969bddb3169e96b6ec6d10e92e7c2a90d0e7a2bc29145f27795b7bc36520a4633b90f0000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2c, 0x10, &(0x7f0000000040)}, 0x24)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
exit(0x0)

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd000000", 0x10, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/237, 0xed)
getdents(r0, &(0x7f00000001c0)=""/151, 0x97)
getdents(r0, 0x0, 0x0)

21:36:32 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x4c, 0x12, 0x7}, 0x4c}}, 0x0)

21:36:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/237, 0xed)
getdents(r0, &(0x7f00000001c0)=""/151, 0x97)
getdents(r0, 0x0, 0x0)

[  530.340344][T19633] EXT4-fs (loop4): bad geometry: block count 306 exceeds size of device (256 blocks)
[  530.378401][T19640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
21:36:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000480100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:32 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x125d, &(0x7f00000000c0))

[  530.427817][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  530.456953][T13170] Bluetooth: hci3: command 0x040f tx timeout
21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd000000", 0x10, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@ipv4}}, 0xe8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c)

21:36:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10dff}], 0x0, &(0x7f0000000080)={[{@fat=@codepage={'codepage', 0x3d, '950'}}]})

21:36:32 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '~\x00 ', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xeb}}}}}}}, 0x0)

21:36:32 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x58, 0x12, 0xe15, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "092f442e46c854e8"}]}, 0x58}}, 0x0)

[  530.526338][T19660] EXT4-fs (loop4): bad geometry: block count 328 exceeds size of device (256 blocks)
21:36:32 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r4, 0x0, 0x3001a, 0x0)

21:36:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x89a0, &(0x7f00000000c0)={"370eaf441c323356b93a25d1f29b3bb4"})

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd000000", 0x10, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8923, &(0x7f00000000c0)={"370eaf441c323356b93a25d1f29b3bb4"})

21:36:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r2, 0x0, 0x2000427, 0x40)
write(r2, &(0x7f0000002000)='/', 0x1)
sendfile(r2, r2, &(0x7f0000001000), 0xfec)
write$P9_RRENAMEAT(r2, &(0x7f0000000080)={0xffffffffffffff0d}, 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)

21:36:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000004c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000440)=0x9)

21:36:32 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xe04, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "280401a545bb0447cb91bed25658b6ddbbfeabe7c059e91777268c40aa6c2421d990eecf15e0453f58147a8f7c4af041a7f54a3176b08fd3550c572c7af55098b437dc250a3fa64511ccabfb217450dbe1d9f6eaca263bdcd9804f55c99874d1190cc066acb9000003eb82adb00dcb"}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4000010}, 0x2404e004)

[  530.743594][T19692] EXT4-fs (loop4): bad geometry: block count 332 exceeds size of device (256 blocks)
21:36:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000005c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:32 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000140)={0x0, 0xc2, "51ded6"})

[  530.903456][T19720] EXT4-fs (loop4): bad geometry: block count 348 exceeds size of device (256 blocks)
21:36:33 executing program 1:
r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f00000000c0)={0x0, "d639cff41cd191d76d98ca027311395fc0f648a631f2dcff91474375e5ed7ec19883e3ed5fbf44fcef05a69a54cd34cc4cfbf4b3ad023b661554e6703fc0bdbf"}, 0x48, 0xffffffffffffffff)
r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000180)={0x0, "2f2d5ad8a6d36ec73a6ceff21a87ba92b21656af16ed9c067720a039780d29862c0bca13ec61aa17f29ccf532ef3550a1c035981a8b1ab93a2cd8ded29164fbb"}, 0x48, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x6, r1, 0xfffffffffffffffd, r0, 0x0)

21:36:33 executing program 5:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x6, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x2, 0xc2, "51ded6", 0x9f, 0x24})

21:36:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x40000000002, 0x3, 0x2)
r3 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf)
setsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000000080), 0x4)
sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33)
setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

21:36:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000", 0x11, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:33 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x8a, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x1, &(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x7fffffff, 0x84, &(0x7f0000000640)=""/132, 0x66fbaf75dec74a55, 0x6, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4, 0x1649696f}, 0x10}, 0x78)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000))

21:36:33 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000600100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:33 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x127c, &(0x7f00000000c0))

21:36:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:33 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f00000000c0)={0x0, "d639cff41cd191d76d98ca027311395fc0f648a631f2dcff91474375e5ed7ec19883e3ed5fbf44fcef05a69a54cd34cc4cfbf4b3ad023b661554e6703fc0bdbf"}, 0x48, r0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$link(0x6, r1, 0x0)

[  531.566036][T19743] EXT4-fs (loop4): bad geometry: block count 352 exceeds size of device (256 blocks)
21:36:33 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000680100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:33 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f00000000c0)={0x0, "d639cff41cd191d76d98ca027311395fc0f648a631f2dcff91474375e5ed7ec19883e3ed5fbf44fcef05a69a54cd34cc4cfbf4b3ad023b661554e6703fc0bdbf"}, 0x48, r0)
keyctl$update(0x2, r1, &(0x7f0000000140)="f3", 0x1)

21:36:33 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x1269, 0x0)

[  531.758361][T19759] EXT4-fs (loop4): bad geometry: block count 360 exceeds size of device (256 blocks)
21:36:34 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, 0x12, 0xe15, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, '\x00\x00\x00\x00'}]}, 0x54}}, 0x0)

21:36:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0)

21:36:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x890b, &(0x7f00000000c0)={"370eaf441c323356b9040000009b3bb4", 0x0, 0x0, {}, {0x8000000000005}})

21:36:34 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100), 0xfffffe14)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080))

21:36:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x1269, 0x0)

21:36:34 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006c0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0xac0, 0x0)

21:36:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x0)

21:36:34 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@const, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/205, 0x3a, 0xcd, 0x1}, 0x20)

21:36:34 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/null\x00', 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

[  532.426543][T19784] EXT4-fs (loop4): bad geometry: block count 364 exceeds size of device (256 blocks)
21:36:34 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000))

21:36:34 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000740100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:34 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x4c, 0x17, 0x7}, 0x4c}}, 0x0)

[  532.536701][    T7] Bluetooth: hci3: command 0x0419 tx timeout
21:36:34 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000))

21:36:34 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xcc200, 0x0)

21:36:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000000c0))
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
accept(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

21:36:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0xac0, 0x0)

21:36:34 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x7ffc, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

21:36:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6fff)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

[  532.620085][T19810] EXT4-fs (loop4): bad geometry: block count 372 exceeds size of device (256 blocks)
21:36:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x1267, &(0x7f00000000c0))

21:36:34 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000007a0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0xac0, 0x0)

21:36:34 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)={0x1ec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "dd62f86ad6f71608c718b7bab7bf360a703685a54e31b731e3213d40fa6c1791442398a72812e37add596174e6eedb0040577402c0a2e945dbc8a3f28ab5d2b959e91caf48d4f0debde7739ba55b4eb2d7389c08911db1da52f0478f2b4b31891ac3d108fa6fb3ffedf342ca9d0286ea3be10fc09aa8ec58cbd231425ae23734e3c38454bf2deca4b10a910333d207eaf632bd527eaa06f5ec00d797db5ec5722bd4941e99b328bec93c7d26ffb9dfd1fa724ce5ff9fc0ac4b344bcf62ab8e0c36b88f527db4781e67650fb8ab"}, @INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "a367927c6e3629c874c3955d0499a9df7a077db2fa436d72b8831d254095285bf8c73079d677cd96e62b7b16be65bb7e85a73b2ad86e87227c6d088a83760a318206006cca5da96a9caa41f13e194aea4c6c726d66668959a0281c2629"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "08fd46c94521bc41a44e16523c02a9506b7366be488cd4be95541773a3fb0a3b4ab75dc35bc6a7f6e4a8c7b67565ad8171a4ec0016471e94dd073c78288742eb9f13c7b3c2f66fd73a8d651a856e9f97f8ba36bb2ecd20d4b4d2c3a794b48304550e04451f7ab063b0edbfae116627fb2edc6b9e0017c34e3b2879e67b7e56878a815df50aa4ce0c48595e9ddd83dcb50349068aa6"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "e80a2b61dc4df5609da0250fba586928c5f2963096d6dd9a1a"}, @INET_DIAG_REQ_BYTECODE={0xcb5, 0x1, "c4ec8f7c64d7f9c58a22d7ef09edbd37a5224feb69d28fc65089be4c4e934e93f3bd68e8812f074d66a59cf47744ce17ca65a67d19f3824ae5358af9b61161b2f10f1f8b1da43fa4d07d702a94fb3cbfe511ccd05811004b43c710b81b6e3e07d33ee65fa7834664d4f5941d4dfbbc6f9f72dd418ea7e6ab126bbe4689b6416c4f28c74cf8d9b79cf6c960c5b5733e413476261565f63ebfc9fd39f29372fed90dbc1967f14ea19194813a04a39096b02da24e0b8866c04e9591dec3f0ff65cc517b7b03d621cbbb713b1a7c61157063964eb633ebb912ad3bddb6cad6666ac6e9529f08ea5b80b99ec1797ecd5f61a7b1e6a90b185fae4823fe2939f696c08d0b750413e22c80445c59d6bce032ab687f0006191643a9fcd8d4284930bc3e00140eb45c87c0e1d3d9b4437948c055a1d8ec819ef3adf9b8dd992fd1d2d6e736aa47d4dda7e16746df433a23a3958c682fa30962f8905dc3c2f6bd0553f0f403ef5fe8449deef82cc75a86767499f3e543fe1655e6ca00b46c5e790b287f7dc26f0c3c3beaf94391ec04aad7907403aedebc8e2ed55279dfb91df3f7161f27c4833b0c2f12abc083e0853ede41a9c43bdcb60d84db570dea1e6940cf59bb0439ab37de98c2e6291c153c88c26cb8b5db32fefdeca7c321e20390d0f8849d8d98ead93a5646b26cd5a4abb4f0583b81ef3588e997c22016ae87be962d519107f65c35eafe1a1da4cec3d361d926b544d2f3327032f04eca805c20a712e4591926e7d688909b7338b4a0a6e070a38e5a1b84f0c3b8a58e4a8849388ecf2c64a960cd39c8ce93544b99deed54883afb9cd9ccdaddabba41fcc0b27f8da741ffe15054be1f6d3af255e8e69ae5c7f3102799263e4a51172db449b586a7d409c22de6a3abe69785ee1766590853f14ff69648271689562e6d4329c677fd60e9f226f4bdfe47abd215f74a5c294788f353de0dd6500c654113f7044bf13e594c7fb09879c316b50821bbe1e0b2868dcb152aa4ac89786c3fa8913c88d3831278ae250503fa4bf5c55e5f17ab6356856bc3dec20f10ee9f4d857136d2de9e476357158eac4ef0dbe664b2aa30c1c239bee7413498aa407364da6c3a5fa19752d98c82964e6e354754bc093cbc769c092754bcb0759d09734aad2174915671b7d60d55436d23f8ae132547e84ac3b75c2f8e0c5b467745e12e429c6e9807274a1efb88a84fd0eec0d73b86591a893c6ddaec6860515ad836b1e4ee2dbc0ee4158431103ba8db9ad211f8008efef8ffef945f6405d3244ada457ea6f5ff89da25c8362d408ffcf3303796b3226c019aa1f6765a5698c761403b30d9b9401a2f9a78e757cd6cbe94a954393fbe5ed167b2f34065f3978f18fd7f08d6284059bdae0d48d799b0e9c4636683397e4032ab14867b5d04c2912820483f3e18349f5b6da5928762fd1b40014a0d0852bc10bcdff12892f145bad3cb33f34ed01471901cf5c321ed6b764303598ef78176e764040b8e67b5954b5bdd0a759e0dcc8d6f21a6b5eda789aff35026b783c6204547caf357fc8acc57bbbacf29d4cea7e0f108ed3684689031755ffed3106041fae14d0063cd7cdac003df0fa2bce279c29b20c7f3134f37d9eb73aae9988ed39d7f87a4df4d942c6c933f615c814ac68dc82b543ec0313f9cf3de2e901884e3541214216410fa1b6da7ad72345766a2f9a8dba1d7c6af14b8349c329118bf5426e223aa9f807d0cb70fabd70983f54405a571752127089f7d279eeb966e3031944a0da5a490ffb0393ff3d0a9ad00f53e939506ac701b020a3dfb363f899b427b274ec0839f5eb20a81811442115343fa6a085ea1c00cb45b6fdbedefd42e829aff5b322067cd76e4e383acebcb7f55fafadcb230946aafe041203b698d4a702312dae48577fcb8784f40d598ed55a4be8daa2108e6a9d9bd32a11e81d405906a1ab0f02f6b1c12d1a5da3a6a0d7001d94cbada82f91ceb1008579b19de785916cbc37584a489ed404d3621cc5e29e545545694fa23bbb8241aa765a845cb0d7de9f7b9609907a9857d2120cbffb18c0a9f3110a90c60cb0a2e7ee9f88d71f0de6782c80a38180aeceee58021bed4ce383c6754bbdb2958a78a21a4d79781ee44f53ad1d927fa2de9576d1d928c6eba0bba1344d3e420fba36a768a84cc190190e0890b610209e2644b792b0ff8c9b672169f3517510c1c47b3d5bb54017025abad5e49c495579bcd59eee3c417158840490ca40ab918b63b474906e66a0cb1010e8058103456fcd80189607a82c1e9cc90b76d6ce77518f87a9a4eddeaa966619d7ed3b4f92c63ad8965946d51e87621860f73121cd79355d4ff6932eb845865dd584941388f6746ed12cd3a26ab05c9377179622b2e39e19073eda4927e6f2c0f48ae9185ef1273dfe9d13977ecabfe86d72e3dc829381ee57bf4312b41ab6e589f94de26e721ceea3d20a5db07338cff2e76dc596ff2f56099cf18b092724ec0e046a24f0795ece7eb7e25215d0eb6704978910b679620c786fe36166fc2cc20db7754cd008da251dcabe1eb6f13aa6c8161d21017c116007e0a44cf4cf09895c03fb6945dc42cf28ade3e4a4576ca1c227f70cc34d5c26b448552f449a9d24defb035096a51f62f18f3b4e7604b4496152dc92b37613ad337c8e916c43d101a503b0dca997f99798fdc60312da4d06afc2094c0ae88d3897654699bd483757db82fdbe093bc76d881ea34b1417e52429088ddace76fa967297c5a8497ce18a31cf6f15fe3a68822660bdbf9373cfdd73150943b5ead4515fe6aa53e0756c5ae7706995adbfbdef920e501a22d1af82832228efa11f829268557ff1d341dff5074b21a6647b03f2b82652d4295d8c7a455da695d082caf934c94c3f12fdbf8ad29aa1198b4ec1341e851fde7a37a62fd318483b5980bbb213ad43853db4d7b2d358b99eb1a04b0fc819fc9199e852cffea7b1bdfec054e4e976275c0388a6b05edfba66bf91e2d3089d711c0af5463e591c29555050dbb6dba9cc0cde9f02bcea27630d20d9bacb3ff47c1b3cc3654af50678c1ae7e0336e34e3ddd056d8512fb3c0b5ec5b7be1c26c3b6c7f2314cc8121c2e9f397cf04c0df67554163428dd39ba0bc34a8c07033c7a4fe1c6d635fd01188de6778db21227143f6846098d97baae54ac09e0c36aaa96bbc8db528ddd522892271ed31d0dd6352d185fa92f85072735a1d6158e63cf3bf7dab23fd5570c9d7dd48a02940b31926f8acb1c2e70f52e65f596f7b0b9964860cb09c2d62cfdc67733bd1d3d18f36197c3e9311d202920fab6bd666f5f942dfb03f87674da9a312e509dd10654acc994f5b8bec450c468ccb2375d8ec3accbd84d3ceeefab57d7f070e021ae5b32ebfed81837b753e5de68f96e3a85e98189b872fe1935dad2f74864794249c2abe43160ea365cb14ef06fbeade14d3be4c732d234721f573ae248deac11ee72647bf30b528f662bc3257cc53458dff1cb4944eb58ca7d9a20065cbf495e294a8fcb0bbc35a7e7daf0c1f5377e61154b0ffd17524283103d69c3ea5f9487295adff130690102aa59604fe69b62d640a51c8980313044dd588d95020428d0bbf10b84e44147a3ca17167bb36c1ef284ba6bff4202fe8ae991960e721be06b49009040ac5140761dcdad576c14f36b0cdf27538bca9598c3a05242109bc63008d7a5042fde45d86b7c15cbe782db91d3ce7affadce53352909ae7afe9d34f246c39ce90aeb3aec79c24608f18bbfa165cce042ba791fce679a6c3e19c27a19ec9996d51ef637d5cc09239c960a14c44201dca875db493cf65b6900ae6e8ef2d626b20c23366adb326e36f558f8708ef4e70fd5980df0a8cdcf47ec7add16101fab9b9746138a6b8767b193037d990429693f0bd6487faae2ecd1798393a581a808994dca2cbfd7960b797512a01742a3402e86c922aa5ddacc759eef100863125eab91dd96655922071299684c902fe3e86b4b76ab178d90db3f94522ae9c114bbceab67981c8c22a44feaba7c0ca3d5f3a74c0977a3ce436fe63f8e7ae81078d304447beb73c51dcac797f3f6b14493c813acded21e2b2f781983a071856fad1560ea8a68da71b61e3814708594f5abed1bfdb404be01196788bd3cbea8fcca592e8806a3ba2cee80cb56e4c738e96980c781d9077cbca0664a41ed33db2b18eedb71ae3e8a1d9dcab425c2d5bc1db672f28a4950154a868a462766491a1eea27c30eadb035b80cb39db0e5d907abf99125541a443cb0365a6f0a078cbfd2c6d55d706cc08edc6c31dd41382174f2cd8cdfcc2ffe9edf2ed0fdb243cec205c507cc11922bb200899df1e2541378e854ed97e08d3650e2e3521d6f58a1aac96a73a37707bc430f68819d24dbd09c0f1c14a8e60daa2b2cc98c682a4a4f0325fea5f4d7b51a8a5e27a3bfccdaf15128b5855c8475ac20412dab5fc99c1cc76d45af5cf7ee2675d84235f3ccffbf641a1a1904a2fd88e3c4134c2caa3060e0ee064c2db85ef47adbceb6cef4c22029a5cbe1acaa42ac3c7dcd30c2dbe2bb0731c11e84e7502eefd838c63221d4b8c5bef"}]}, 0x1ec4}}, 0x0)

21:36:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8911, &(0x7f00000000c0)={"370eaf441c323356b93a25d1f29b3bb4"})

[  532.735495][T19820] encrypted_key: keyword 'new' not allowed when called from .update method
21:36:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000000c0))
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
accept(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

21:36:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x890b, &(0x7f00000000c0)={"370eaf441c323356b93a25d1f29b3bb4", 0x0, 0x0, {}, {0xb00}})

21:36:34 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000140)={0x2, 0xc2, "51ded6"})

21:36:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0), 0x0, 0xac0, 0x0)

21:36:34 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0xc0481273, &(0x7f00000000c0))

[  532.828260][T19839] EXT4-fs (loop4): bad geometry: block count 378 exceeds size of device (256 blocks)
21:36:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0), 0x0, 0xac0, 0x0)

21:36:35 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000003c0), 0x4)

21:36:35 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents(r0, &(0x7f00000001c0)=""/151, 0x97)

21:36:35 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000820100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:35 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180)="f8e1fe240b5a4f", 0x7}])

21:36:35 executing program 1:
ustat(0x1, &(0x7f00000001c0))

21:36:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0), 0x0, 0xac0, 0x0)

21:36:35 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:35 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

21:36:35 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448e0, &(0x7f0000000140)={0x0, 0x0, "51ded6"})

[  533.001858][T19864] EXT4-fs (loop4): bad geometry: block count 386 exceeds size of device (256 blocks)
21:36:35 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000830100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0x0, 0x0)

21:36:35 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x80081272, &(0x7f00000000c0))

21:36:35 executing program 5:
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

21:36:35 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  533.146464][T19884] EXT4-fs (loop4): bad geometry: block count 387 exceeds size of device (256 blocks)
21:36:35 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKALIGNOFF(r0, 0x1277, 0x0)

21:36:35 executing program 5:
bpf$OBJ_GET_PROG(0x7, 0xffffffffffffffff, 0x0)

21:36:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003d80)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}}}, 0x24}}, 0x0)

21:36:35 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000840100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:35 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$set_timeout(0xf, r0, 0x0)

21:36:35 executing program 1:
r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f00000000c0)={0x0, "d639cff41cd191d76d98ca027311395fc0f648a631f2dcff91474375e5ed7ec19883e3ed5fbf44fcef05a69a54cd34cc4cfbf4b3ad023b661554e6703fc0bdbf"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffd, r0, 0x0)

21:36:35 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:35 executing program 2:
io_setup(0x7, &(0x7f0000000740))

[  533.345047][T19908] EXT4-fs (loop4): bad geometry: block count 388 exceeds size of device (256 blocks)
[  533.656887][    T7] Bluetooth: hci2: command 0x0401 tx timeout
21:36:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0x0, 0x0)

21:36:36 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8937, &(0x7f00000000c0)={"370eaf441c323356b93a25d1f29b3bb4"})

21:36:36 executing program 5:
keyctl$instantiate(0xa, 0x0, &(0x7f00000001c0)=ANY=[], 0x28, 0xfffffffffffffff9)

21:36:36 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000850100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:36 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0)

21:36:36 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:36 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x890b, &(0x7f00000000c0)={"37ffaf44f1a128293af5d4f7000042b4", 0x0, 0x0, {}, {0x8000000000}, 0x0, [0xb00]})

[  534.028048][T19941] EXT4-fs (loop4): bad geometry: block count 389 exceeds size of device (256 blocks)
21:36:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r2, 0x0, 0x0, 0x40)

21:36:36 executing program 1:
r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f00000000c0)={0x0, "d639cff41cd191d76d98ca027311395fc0f648a631f2dcff91474375e5ed7ec19883e3ed5fbf44fcef05a69a54cd34cc4cfbf4b3ad023b661554e6703fc0bdbf"}, 0x48, 0xffffffffffffffff)
keyctl$link(0x5, r0, 0x0)
keyctl$get_security(0x6, r0, 0x0, 0x0)

21:36:36 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000860100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:36 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  534.188513][T19964] EXT4-fs (loop4): bad geometry: block count 390 exceeds size of device (256 blocks)
21:36:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0x0, 0x0)

21:36:36 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setsig(r0, 0xa, 0x5)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

21:36:36 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

21:36:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x890c, &(0x7f00000000c0)={"37ffaf44f1a128293af5d4f7000042b4", 0x0, 0x0, {0x3f00}, {0x8000000000}, 0x0, [0xb00]})

21:36:36 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:36 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000009d0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:36 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  534.884259][T19988] EXT4-fs (loop4): bad geometry: block count 413 exceeds size of device (256 blocks)
[  534.894284][T19987] input: syz0 as /devices/virtual/input/input69
[  534.908311][T19987] input: failed to attach handler leds to device input69, error: -6
21:36:37 executing program 2:

[  534.952181][T20002] input: syz0 as /devices/virtual/input/input70
[  534.966702][T20002] input: failed to attach handler leds to device input70, error: -6
21:36:37 executing program 1:

21:36:37 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000a00100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:37 executing program 2:

21:36:37 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  535.058914][T20015] EXT4-fs (loop4): bad geometry: block count 416 exceeds size of device (256 blocks)
21:36:37 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setsig(r0, 0xa, 0x5)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

21:36:37 executing program 1:

21:36:37 executing program 0:

21:36:37 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:37 executing program 2:

21:36:37 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000c40100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:37 executing program 1:

[  535.738468][    T7] Bluetooth: hci2: command 0x0401 tx timeout
21:36:37 executing program 2:

21:36:37 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:37 executing program 0:

21:36:37 executing program 1:

[  535.786847][T20042] EXT4-fs (loop4): bad geometry: block count 452 exceeds size of device (256 blocks)
21:36:37 executing program 0:

21:36:38 executing program 0:

21:36:38 executing program 2:

21:36:38 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000c50100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:38 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setsig(r0, 0xa, 0x5)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

21:36:38 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:38 executing program 1:

21:36:38 executing program 2:

21:36:38 executing program 1:

21:36:38 executing program 0:

21:36:38 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  536.609676][T20068] EXT4-fs (loop4): bad geometry: block count 453 exceeds size of device (256 blocks)
21:36:38 executing program 1:

21:36:38 executing program 2:

21:36:38 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000c60100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  536.800780][T20085] EXT4-fs (loop4): bad geometry: block count 454 exceeds size of device (256 blocks)
21:36:39 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:39 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setsig(r0, 0xa, 0x5)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

21:36:39 executing program 0:

21:36:39 executing program 1:

21:36:39 executing program 2:

21:36:39 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000c70100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:39 executing program 0:

21:36:39 executing program 1:

21:36:39 executing program 2:

21:36:39 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:39 executing program 0:

[  537.510697][T20103] EXT4-fs (loop4): bad geometry: block count 455 exceeds size of device (256 blocks)
21:36:39 executing program 2:

21:36:40 executing program 5:

21:36:40 executing program 1:

21:36:40 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000ca0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:40 executing program 0:

21:36:40 executing program 2:

21:36:40 executing program 3:
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:40 executing program 0:

21:36:40 executing program 2:

21:36:40 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:40 executing program 5:

21:36:40 executing program 0:

21:36:40 executing program 1:

[  538.403305][T20134] EXT4-fs (loop4): bad geometry: block count 458 exceeds size of device (256 blocks)
21:36:40 executing program 0:

21:36:40 executing program 1:

21:36:40 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000cb0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:40 executing program 2:

21:36:40 executing program 1:

21:36:40 executing program 5:

21:36:40 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:40 executing program 0:

21:36:40 executing program 0:

21:36:40 executing program 1:

21:36:40 executing program 2:

21:36:40 executing program 5:

[  538.624019][T20157] EXT4-fs (loop4): bad geometry: block count 459 exceeds size of device (256 blocks)
21:36:40 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:40 executing program 0:

21:36:40 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000cc0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:40 executing program 1:

21:36:40 executing program 2:

21:36:40 executing program 0:

21:36:40 executing program 5:

21:36:40 executing program 0:

21:36:40 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  538.781356][T20171] EXT4-fs (loop4): bad geometry: block count 460 exceeds size of device (256 blocks)
21:36:40 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000cd0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:40 executing program 1:

21:36:40 executing program 2:

21:36:40 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10)
connect$inet(r0, &(0x7f0000001a00), 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x0, 0x5, 0x8}, 0x14)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x3f)
sendto(r0, &(0x7f00000000c0)=':', 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000040)="96", 0x1, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
close(r0)

21:36:40 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt(r0, 0x0, 0xb, 0x0, 0x0)

21:36:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@empty, @private2, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x93a6e4f2150b2997, r2})

21:36:41 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt(r0, 0x1, 0xd, &(0x7f0000000000)="ca13fdcf", 0x4)

21:36:41 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ftruncate(r1, 0xc00)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
sendfile(r1, r2, 0x0, 0xffffffff)

21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  538.949244][T20186] EXT4-fs (loop4): bad geometry: block count 461 exceeds size of device (256 blocks)
21:36:41 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "9febd34c5ae0d458996d97b144977306860b7dd9a1dad5393f00329a9c92bee7bdea47c0f94094c146df8ed6e3840c741fc82b38c663bd937a6f410101ebc980"}, 0x48, 0xfffffffffffffffd)
keyctl$get_security(0x11, r0, &(0x7f0000002840), 0x0)

21:36:41 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil)
shmat(r1, &(0x7f0000000000/0xd000)=nil, 0xd000)
setsockopt(r0, 0x1, 0x14, &(0x7f0000000040)="47a59e1d1f", 0x4a)

21:36:41 executing program 1:
shmat(0x0, &(0x7f0000000000/0xd000)=nil, 0xf000)

21:36:41 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000ce0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:41 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x7, 0x5}, 0x13)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000001180), 0x0}, 0x20)

21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:41 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt(r0, 0x1, 0xc, &(0x7f0000000080)="ca13fdcf", 0x4)

21:36:41 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000057c0)=@add_del={0x2, 0x0})

21:36:41 executing program 2:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0)

[  539.144433][T20214] EXT4-fs (loop4): bad geometry: block count 462 exceeds size of device (256 blocks)
21:36:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x0, 0x3a8, 0xffffffff, 0x1e0, 0x2b0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'vlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@private2, @icmp_id}}}, {{@ipv6={@private2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={[], [], @multicast1}, @ipv4=@remote, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "67a9"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)

21:36:41 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x82, 0x0)

21:36:41 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@ipv4={[], [], @multicast1}, @loopback, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2})

21:36:41 executing program 5:
r0 = shmat(0x0, &(0x7f0000000000/0xd000)=nil, 0xf000)
shmdt(r0)
utime(0x0, &(0x7f0000000080))

21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x0, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:41 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000cf0100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  539.273486][T20235] x_tables: duplicate underflow at hook 1
21:36:41 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt(r0, 0x0, 0xc, &(0x7f0000000100)="e3", 0x1)

21:36:41 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f00000003c0))

21:36:41 executing program 5:

21:36:41 executing program 1:

21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x0, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  539.318382][T20243] EXT4-fs (loop4): bad geometry: block count 463 exceeds size of device (256 blocks)
21:36:41 executing program 1:
r0 = socket(0x10, 0x3, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x201}, 0x14}}, 0x0)

21:36:41 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x1c8, 0x260, 0x130, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@private, @empty, 0x0, 0x0, 'vcan0\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000002b8, 0x0)

21:36:41 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000d80100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:41 executing program 5:
shmat(0x0, &(0x7f0000000000/0xd000)=nil, 0xf000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40)

21:36:41 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x140}]}, 0x34}}, 0x0)

21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x0, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7a}}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x40}}, 0x0)

[  539.468313][T20261] x_tables: duplicate underflow at hook 1
21:36:41 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt(r0, 0x0, 0xa, &(0x7f0000000080)="ca", 0x1)

[  539.526132][T20266] EXT4-fs (loop4): bad geometry: block count 472 exceeds size of device (256 blocks)
21:36:41 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt(r0, 0x0, 0xf, 0x0, 0x0)

21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x0, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:41 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000d90100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:41 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt(r0, 0x1, 0x14, &(0x7f0000000040)="479d9e30154b00000000c00000000000", 0x10)

21:36:41 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

[  539.714066][T20291] EXT4-fs (loop4): bad geometry: block count 473 exceeds size of device (256 blocks)
21:36:41 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x0, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:41 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000640)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100))

21:36:41 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

21:36:41 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6040000600142c"], 0x0)

21:36:41 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  539.806738][T20303] x_tables: duplicate underflow at hook 1
21:36:41 executing program 1:
shmat(0x0, &(0x7f0000000000/0xd000)=nil, 0xf000)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x1, 0xee01, 0xffffffffffffffff, 0x0, 0xee01}})

21:36:41 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa}}, 0x4c}}, 0x0)

21:36:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x8, &(0x7f0000000480)="f8df2b53", 0x4)

[  539.901745][T20314] EXT4-fs (loop4): bad geometry: block count 768 exceeds size of device (256 blocks)
21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x0, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)

21:36:42 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:42 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9)

21:36:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x3}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x5c}}, 0x0)

21:36:42 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f30500030a000100020423dcffdf03", 0x1f)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

21:36:42 executing program 2:
r0 = shmat(0x0, &(0x7f0000000000/0xd000)=nil, 0xf000)
shmdt(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@phonet, 0x80)

21:36:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x17, 0x0, &(0x7f0000000100))

21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  540.071570][T20345] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  540.082168][T20341] EXT4-fs (loop4): bad geometry: block count 1280 exceeds size of device (256 blocks)
21:36:42 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9)

[  540.133487][T20345] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
21:36:42 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)

21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x400017e)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x82803, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x140, 0x2, 0x9, 0x1, 0x0, 0xed, 0xe0d6}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

21:36:42 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

21:36:42 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:42 executing program 1:
syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="010003000b0001005c59f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0x18000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1a3e2835002a4c696e757820554446465300000000000000000000000405", 0xde, 0x180c0}, {&(0x7f0000010500)="000000000000000001", 0x9, 0x181e0}, {&(0x7f0000010600)="06000300e2000100800ee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x5d, 0x18400}, {&(0x7f0000010700)="000000000000000000000000000000000000000900040000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000400001000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0x184c0}, {&(0x7f0000010800)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e010204050000000001000000100002003802000070000000f007", 0x4e, 0x185a0}, {&(0x7f0000010f00)="00000300f20001001b39280270000000002a5544462053706172696e67205461626c65000000000001020405000000004000000000000000ffffffff10010000ffffffff20010000ffffffff30010000ffffffff40010000ffffffff50010000ffffffff60010000ffffffff70010000ffffffff80010000ffffffff90010000ffffffffa0010000ffffffffb0010000ffffffffc0010000ffffffffd0010000ffffffffe0010000fffffffff0010000ffffffff00020000ffffffff10020000ffffffff20020000ffffffff30020000ffffffff40020000ffffffff50020000ffffffff60020000ffffffff70020000ffffffff80020000ffffffff90020000ffffffffa0020000ffffffffb0020000ffffffffc0020000ffffffffd0020000ffffffffe0020000fffffffff0020000ffffffff00030000ffffffff10030000ffffffff20030000ffffffff30030000ffffffff40030000ffffffff50030000ffffffff60030000ffffffff70030000ffffffff80030000ffffffff90030000ffffffffa0030000ffffffffb0030000ffffffffc0030000ffffffffd0030000ffffffffe0030000fffffffff0030000ffffffff00040000ffffffff10040000ffffffff20040000ffffffff30040000ffffffff40040000ffffffff50040000ffffffff60040000ffffffff70040000ffffffff80040000ffffffff90040000ffffffffa0040000ffffffffb0040000ffffffffc0040000ffffffffd0040000ffffffffe0040000fffffffff0040000ffffffff0005", 0x236, 0x1c000}, {&(0x7f0000011400)="020003003800010077c9f00100010000004000006000000000400000e007", 0x1e, 0x40000}], 0x0, &(0x7f0000013b00))

[  540.345045][T20377] EXT4-fs (loop4): bad geometry: block count 1536 exceeds size of device (256 blocks)
[  540.368946][T20380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
21:36:42 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000001c0)={0x6, 0x1d, 0x6, 0x0, "520aa4dd9b3c13ad3e1c864916871c4edf7268fcc514419fda976da1dde85634"})
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020005491d, 0x800007f}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008002f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="14aba02e95c8c0408265", 0xa}], 0x2}, 0x0)
ptrace$setsig(0x4203, 0x0, 0x9, &(0x7f0000000080)={0x3, 0x2c6, 0xffff015e})

21:36:42 executing program 0:
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x4, 0x7f, 0x40, 0x4}, {0x2, 0x1f, 0x20, 0x266}, {0x20, 0x6, 0x43, 0x9}, {0x0, 0xc2, 0x4, 0x100}]})
r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000580))
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000000))
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0}}, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x60cfc78e, 0x400040)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000880)={{r1}, 0x0, 0x0, @unused=[0x2, 0x1, 0x1, 0x10000], @name="3af7260ba438385930ad995a487bccacc32f002a0c88fe69c07f5d8797a5fc21270cc595cde6ed6322830ee03b3fc527fa84db7837639cb8c7108e49f8d0363ba2f4ffdb6e90eca0af70de6e8d4bae8a65e70cbb527c7263207a59d0e3cf9e7d04ebe192a33cb97facda0d484516d7140f9a42c563975bb7aa4916e5b4765b7ba48ffb4723c8614cd05ea2dedeb01abd284b87b0b6e88a2f2ea7db33f7a26036c0c1bdbd32bb9390259fb28f615a307b1f67dde6f0acdb17bc10b83841a4571cfbeb872941eaa9487f6b7e68360ef5ef3197781d09caabbe194dba1ba8abb466bc58b9d53b8e5ca91565f9ab3e148e1591b5a3145eb406e29c45f25e9dfa2ac8f6b9afc5526e8750f8b624ea6a7c46f3f35578f976debcc0605254d447fca13c22bdf2325afdcc67bbdc62ed208a0c6f86b45e7fbd5b017a531cf63c4cce13094d3063c7a5c8a02ea1da120c34031f49509169aa75e4ad046ab946260ad0946424cc8cf107612dd5c94111ec87ec884d0e5849be2e62bb00e8c185e5ae86271ece3760c0ecb60f27677eaad1c15269e1d0a48190cd371eff68985d0593457cdf0babae8a290c2b75420970317db98719416f3af7363755b6fde50feb98f73bb9d449ad8f6972a5422233495b319388e7047b119fead671203b9c2d6f34aa6194f70cf60453cc3ce84c335fd2396228901e0ed8918a4039abb850b25f40aa9182b701eb9d2d5098d14cfde42ae0fb19176886c52557c9175bec363945396970c5ef1d9838fbe5cf91125af0dcfb652d06679104a14139d9460b9da65aa4fd16368457532711a73c171fe9fbe990dbd013ba365872decc294ecac5d79b30c7345a40779c0ee2ae3edeb203148fa1d67d579325f6987a06cbee5527c8a892840eb05ad4ee16a51bc6de84f6a1c12474ae22a3aab09724896ed637f5c7a3a1f88d0bd5d07ff020bad8ce6f4707ea5042cfe1c6186700079b704cf09bd954011c378b042301dd34efb701900a2d54026f0c4a53160f1126c429508c3919fed28d0f2d7700c235674b22427edd7b0b1f4e6889e07ebdadedddfc6b90276656749a99e851dccc0a4c1ed05f4a6bdf13ba7125b1e995e8dc49096754e1053526ce37171502efaf070f011297c66b9f6f542f58a25d683aa202a7a3e9decc769987b0ccea5f21673f2f9ee2efab0449e56f3312a8eb286cb2dc1889d85c114899e4baa3c6cd69fbaae0661d2104efaf421777ba28afb97013ed9f6e9e3006d85b8c43129f1586575096466e86cab814e9329ff39465b853ac72a69619fa7b32ee90377dfb520671555fc4b710b14a01fca7c141dd9c3e7af5d4cebe4287b66d12bbe5a6f4ad53096e623471398e028860418a6a45e44de23040eff09fc216f0dcdb2a8eda82b3d6fcc735eb90cf370bdb503c6fdfd1f890906c864b8bdbdbe20f519b2e73348e08e7ba19533e740159e410fbb3db588bd30242a2d5cd445957780bf52af9fb9724514eef4b8a882b6167b9571f1c90138e99dd81214d33f4dad41ab5c44fae536d8d6e3f8ff01c3e9eaffbaf40eaf837b2f28069499b3f5d64898f01b5caaad7c59a0374ead6d5413b2894fed10b4d928e5373f7c109583d34e9ab873da94547f16cf9bd3081f921e3d3c1b9497a31192799896f8d79247113b8e649d577ecb9df6553aebeb503f564c3c9604b3732aa784f22881382d689e632c3db1b8254394d5da313ac71469b450fe8383d3919a4eb84742e22c76056aa1ae54f3ac419d264874b06cd749664d81450894c3185334afb85360c238597daadd3de4744af50e9b04a4454bad2e2c63352217df48c9b8f0f832a6544da4d555b004786b7fe5a6907f2f9a466d871ae59e817407d0f0aa94b167740d8c4a12933f5c984961c5349f5e500c3a02aaf00f923833ea4cd6c015a6b6aaa201883941349959892c6c442ff1151c894061f711efab5b39f6092b30fa36bc8cbdc0a670960ac13d4fbfd9a9e54868e8874f8ad891903299a1280e9f3139ca60f4e6fba6a848da4a99b985957376c5f397e6d5683ebf8f2c0a0586bbc7edd871ac64c8e497e6d2718a12d5558b53faa177186cbfda97e04ca3cc54d3afc12b2dc781ff7d252fbd752bf70f481cbe3b4ed7f743fddb9d8e39f7c6d7ed62ee220c8f0c952694cce859e38f689aabf3d47bd6d8793816e15bbe4832a45be7f0987dc713ff58118f8152b489509f144f563f44663ae96e56a8c6a05e18aaaf7e398677cc84e898376f2c231e606718102070f0fcf7c7a6f64a8558face3b57c308c9e7c0dbf519551f67233d653bb73bfa91e217267a40efc70f11e9ac784a2e61f0ded5d977c1324aeae3685e401feeff550f73d7221617fc8a3e88a97781f76d3c27c4fccc83edd53d8ee7f0d5832a28dc34ded1fb619c4789ce14e8bd9c081079e97e2f6e584a1c39c9765f26e3068b45c5c02742347507974ab3081c95077490355a6707785e72749122d3146f72d93abfe5bf3b88b9c76086ce70a7ef1585dd85e922d25278f50cf595cd3d285ec9723bd558c1cc99805b749b046ab32d2bf1e4654b9575d8997101ed087e9d12b7bce78b74fddba55322fcf331a7e1f67bcc34bf17e93e61f2ea63d6968d6b0c5582ecc55dd9e13cfa877f67ce18ba88d258da6e97c4f58b7a857a6785d2efad1eb5e81434111731346820dc2e6d6e5d903846b77cd68ec95b46f4b87a2ba7d464cf77f9cb6809453a2beb8dfd0fa783ec7baf2207067eae516e5f731807c79e317fe717d49ef4b7c822045efd979c3ddc2a546e200684cb2563f61234e9c2a89150ebd0800f09b3740232e4a7495d9f9349067c30cd5cf5a24747145ced64fdeffbefb032f897baf8139cafc2144e39e3ce11bb8c577462f4612a1c53e41eb5091db45b415181e194ff028c41851af0c075e6f4c9e0b89f1b0a7e59e09fbebddea31a5125163d56154d3d66b0b84fb8307f3ed6f89a1d992a8f29fc4b5e562d4543b388ace376bcabfab13bc4096b8d18d48f81ebe2a6c986ee06d7f26a1c9ef4b93143a6beb64149c2c82ec36dc3881ad5d9e77c55909883e8e1817b42acb49cd49e81a0eb2d37800b950d632999d16aec9c0cd253af78616d3a5bf5151fc7f4ed68a6e9be0cc923ba591dae7fcad0582940b30cfdf4142efb5f798aa4d386dfbe417ae870e65bca375da29a8f0824997036b558513154ae677a8134c7385cf4a2bcddae46d5598fe0dfe09beee4d22a17c0ec8cc6d67ce886fb9d75454e770628ace3a6fdf3bbfcc27612c9fffc3f3ef28bd3c9a9ab9e2b6e7551a3349ba63696360e470e55b02665cd76767597235e040d7158ad74afdaa660107b202b28e2f064ee028153d509b14d9aa43a73dbfadb2ce65b0f6c7bb9a1808e68ec68350f54b9d843b88c2724fb891b42b5974880e91e7cd91c875fc24bbfc0ad50708b3502614ed547faf3bb70ec23396d492880d183b66adf4d2021e3d23b8ace35ef5457a1e9e6c39099ffd0c50874bf9df220df5c007bef39875eae21def09e1cd996404d74c4142f287c5fd78dd6f90273cf1675be41773a4192beffd7ce32537cf41169f22d61967b7089e56790dc4b24c8a3c4c3e41ce536b7df63e7e8637d1652013f957b817eaeaefcd5e93511731aa15a86ccea2bb9292ff2e4bafc9ca89d901ad31be2d35d2fa05e532cab00d42eef3d1266cba40408077d7a2a53db73872f4dc44079f0587cc377463224c95a1ef704abf14576f4583623cda18eb2ef8ce9af267e47ecf0f16acc2dd21383ed38aae64983b90c479731935569aaf17365fb9b3a439316729c9d0fb26088ed18b10a73d959d8f2e11572e57d27818f8a8e6c445a30a9d19be91ad32fa644f65b4ec3d3d99dcc8d8d178806b8b762914e92ab5212f2bf2230734a16ccf54cc41637af6037b9ca64bca3015de142c083bdaf586da816996eaeba4d37cc52f15813ce69802e4c55ccd9f7d8bae5ea8cb0a44002314abe71e0e618f110fd0267a333d53f92c44c836f95ad9a0e66609e089852c8e2d57f3dd08783607d957f3a04c1421dc6c03b6d2427fb871aef87e3d35dd8c19c1ab0bda0fd83f8d75e160938bd9d9ef02a4107506d40f3bf04cb776340503793e842ef4932f11abc3697918af21e7f7582f027e37b1c6fe01dc116af2a23ced0f490821ebc7dfcff09cbef4224c17a091c92e107b65d430d103d90b415fbb16f51ebeb2cd7ead6c0701161f55b7559992ab540065d558aab618892ad2b5a937dbc2d4648a4b2130111fb6d09e9cf7bc9defc1f368202cef9e76a45cd4f4b3a00af1d01b5587823ed811ab019ac3e70ec1402f5d68ec0ae2f735721274768160b6a150fe666d9d89db36a9a1aa2c51f5e31b69dab6834b712effda0748cca157d079860a28811fd718c4d59a08c67694e9116f668222a42505553b18d81b56377c8fd9cf39f98857c8270642ef8267c966ffedd92e7b5535ccf4679765f0faede85a5d2760f0c3dd9a839ecfa8de1bace60d27ea86262e40f6733344a188229528175c385132b7ab30cc8c1eade1960e147c0348616c3eb77196da762c9541f4e499683398479c4994f44f6eac30cf05d50a762ef751e1ea4620ed451724524800772924107b811a88d750c7fd5c640ecf165299defd655787accfcd07fd56ab60d620291d32f12716a60576e7e59cf136a880fe2dadb5da115029a3a981882db1cbde491cfa9a3cdc5b84d8c760b4bffa936929d0deed0914525fbd8ad5e273250f0e8de2eb24b84082cc1b6bc3c3a4d36c1fd1d55997fdeb45cc1174fd4c501653a8595226f520eb346bbc55beb3581c42eba66fb68537b570f21086f0a67c744d1dfb3bbd8c6406f26f9ad5b9e92631b19056813a90aa43a4642854d56d4804d9eb2f62bc2e0898e9147f58c3658f98dee99eb809a365a3ae09c2fb39fb57b91f561320a1f9b498d12a654f06844399f40f6e08a7838c964b6b8474b0a90e8a04fe0a5e09fca554c0389d66ff1cab7803f661d6d67983f79942436a3a4a7458d8373e61becd56f346a0f21a1e9de8748fe79c8ef262c22aefb146d5a2fb9210f55b4d7dda1abddc276f7f5bff1a1ad806cb431f74a551556585578e70988f81cef8f475f10fff29cb22fd5a82927f62e60376ae0fdac32fe5dea0101f64cd95a388755958976f0f974667d55c0b0d9146b011465d09ed555e47df33d61f69f96d4152140c40606d5f119d3dd8e68a98de28d47e862fbb63e0fab7677610b9a0b7bcb9d8a111a96e183e6deecb69575a73406d5106e2335dd302ec9aaefae11e71ae239841616b8da9f1f94463026156a7f9848e76d6c5a9ff698f5549f46d9df61c6f5fcb841e10351b13628f5c8f1cb1ee85308c4af3188704da25899444c2d43b47938d81aa4f84b7ef2400485ef05c2199aaa0763eeccebccd875b128181dcc27fe42a3cf6b77a5e5e76a5a8d09c8624529f5fc561ddca6c87a4ae481b92012adcbea08f2d28a52d83b3f27f68a5d468d6f2da4897abf89829fbb12df256831021a89f37f169355bc685ac109a7616a2b6230f33a9bf383af0e85d89bdd86f8fcc0ce199e548da360e40e79619fc63961131021655b3cd1d9b731f4b0c99a66b0bbfa33f703e2ffc667a2a1be426c08992126f9ffcee3b2ab36a3a1c80aa03cd92934727ce68c98f57ab4d0717240a181eda1d7817db7fba78eaebe077ae"})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
sysinfo(&(0x7f00000007c0)=""/142)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x700, &(0x7f0000000800)})
r3 = syz_open_procfs(0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x4000810)

21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:42 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000270600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:42 executing program 1:
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x200, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc))

[  540.482580][T20397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  540.511756][T20401] NFS: Device name not specified
[  540.521654][T20404] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  540.536405][T20402] EXT4-fs (loop4): bad geometry: block count 1575 exceeds size of device (256 blocks)
[  540.558913][T20404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
21:36:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYBLOB="15f4deadb8d63342d39e1f1c329fef36bb501b37c13d637956b6fe59c03ca0571894faaff83d005096387ddcebf9925e6ee6970aaf9d44cc5e72a0e39ef4299ad79435bbb649aa6c6dab86cc383d2ea45ddc47fcaa740aaded728a7a2907ca2297878104cd9c104ae0efed758e33c96715c7bee9ad116c615aa892750ffc2847210428487c1629c52acca038ce57c0a44554d234f46721bbecf2c65ead216196019c1885d9baf3283833f11beae15486b8a4f5b54ef490a78baf4d42", @ANYRESOCT], 0x40}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
socket(0x10, 0x803, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

21:36:42 executing program 0:
socket(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "f308df", 0x3})

21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:42 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "f308df", 0x3})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x800)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)

[  540.583536][T20404] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  540.591982][T20404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
21:36:42 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:42 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  540.670710][T20422] ip6t_REJECT: ECHOREPLY is not supported
[  540.675508][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  540.695517][T20427] device bridge1 entered promiscuous mode
[  540.704072][T20429] EXT4-fs (loop4): bad geometry: block count 1792 exceeds size of device (256 blocks)
21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  540.719835][T20427] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  540.720331][T20434] ip6t_REJECT: ECHOREPLY is not supported
[  540.733317][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
21:36:42 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:42 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  540.774926][T20436] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
21:36:42 executing program 2:
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="77cec61748fe95f7d9da9900"], 0xe)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x1a)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

21:36:42 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:42 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

[  540.851227][T20443] ip6t_REJECT: ECHOREPLY is not supported
21:36:43 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  540.924620][T20450] EXT4-fs (loop4): bad geometry: block count 2304 exceeds size of device (256 blocks)
[  540.954213][T20454] ip6t_REJECT: ECHOREPLY is not supported
[  541.083192][T20448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
21:36:43 executing program 0:
r0 = msgget(0x1, 0x0)
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001080)=""/202)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000001180)=""/29)

21:36:43 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:43 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:43 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:43 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220407b5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0xd}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x173)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x801, 0x0, 0x0)

21:36:43 executing program 5:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x6)

[  541.563648][T20480] ip6t_REJECT: ECHOREPLY is not supported
21:36:43 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:43 executing program 2:
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

[  541.621912][T20490] EXT4-fs (loop4): bad geometry: block count 2560 exceeds size of device (256 blocks)
21:36:43 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0x7fff, 0x4)

21:36:43 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xbcb9e30726f11ade, 0x0)

21:36:43 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:43 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:43 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:43 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0)

21:36:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
sendto$inet6(r1, &(0x7f00000001c0)='Y', 0x1, 0x20000040, 0x0, 0x0)

21:36:43 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0)

21:36:43 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

[  541.808667][T20510] EXT4-fs (loop4): bad geometry: block count 2816 exceeds size of device (256 blocks)
21:36:43 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:43 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x1, 0x0)
write$cgroup_devices(r0, 0x0, 0x0)

21:36:43 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:44 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0)

21:36:44 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
open(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4040894, 0x0, 0x57)

21:36:44 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

21:36:44 executing program 0:
mq_open(&(0x7f0000000180)='keyring\x00', 0x40, 0x0, &(0x7f00000001c0)={0x400, 0x4, 0x80000000, 0x246})

21:36:44 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

[  541.987030][T20532] EXT4-fs (loop4): bad geometry: block count 3072 exceeds size of device (256 blocks)
[  541.991100][T20531] ip6t_REJECT: ECHOREPLY is not supported
21:36:44 executing program 2:
r0 = socket(0x1d, 0x3, 0x1)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0)

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x8953, &(0x7f000005fe80)={0x0, [], 0x0, "450b037223aec9"})

21:36:44 executing program 2:
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000062c0))

[  542.097299][T20549] ip6t_REJECT: ECHOREPLY is not supported
21:36:44 executing program 5:
io_setup(0x5, &(0x7f00000001c0)=<r0=>0x0)
io_setup(0x8, &(0x7f0000000200))
io_destroy(r0)

21:36:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:44 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]})
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
fchownat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd)

[  542.207622][T20565] ip6t_REJECT: ECHOREPLY is not supported
[  542.224725][T20556] EXT4-fs (loop4): bad geometry: block count 3328 exceeds size of device (256 blocks)
21:36:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x28, 0x0, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

21:36:44 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180), 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)

[  542.368678][T20575] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  542.374245][T20581] EXT4-fs (loop4): bad geometry: block count 3840 exceeds size of device (256 blocks)
[  542.399879][T20587] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
21:36:44 executing program 5:
madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x11)

21:36:44 executing program 2:
rt_sigtimedwait(&(0x7f00000003c0), 0x0, &(0x7f0000000480)={0x77359400}, 0x8)

21:36:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

21:36:44 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:44 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]})
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
fchownat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/157, 0x200003dd)

21:36:44 executing program 5:
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x8}], 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14)
sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0)

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180), 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

[  542.533341][T20602] EXT4-fs (loop4): bad geometry: block count 4100 exceeds size of device (256 blocks)
21:36:44 executing program 5:
syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',fscontext=sysadm_u,smackfsroot=,defcontext='])

21:36:44 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180), 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

[  542.638777][T20615] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  542.656610][T20616] EXT4-fs (loop4): bad geometry: block count 4352 exceeds size of device (256 blocks)
[  542.681545][T20624] fuse: Unknown parameter 'fscontext'
21:36:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x398, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

[  542.694839][T20624] fuse: Unknown parameter 'fscontext'
[  542.700347][    T7] Bluetooth: hci0: command 0x0401 tx timeout
21:36:45 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x108, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x560, 0x560, 0x560, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@mcast2, @mcast2, [], [], 'veth1_virt_wifi\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3)

21:36:45 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000640), 0x4)

21:36:45 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)='!\x00', 0x2, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:45 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:45 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vcs\x00', 0x0, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
r2 = inotify_init()
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x20000001})

21:36:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x398, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

[  543.413419][T20654] EXT4-fs (loop4): bad geometry: block count 4356 exceeds size of device (256 blocks)
21:36:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val, @val={0xc, 0x99, {0xb5}}}}, [""]}, 0x73}}, 0x0)

21:36:45 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)='!\x00', 0x2, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x398, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

21:36:45 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3102, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21:36:45 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:45 executing program 0:
waitid(0x3, 0x0, 0x0, 0x2, 0x0)

21:36:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x398, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

[  543.552037][T20674] EXT4-fs (loop4): bad geometry: block count 4612 exceeds size of device (256 blocks)
21:36:45 executing program 2:
syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x8})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000540)={"b3d5a025cf314d0b82ee5123abe0c62e", 0x0, 0x0, {}, {0x0, 0x9a5}, 0x8000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xb6a]})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000840))
open$dir(0x0, 0x0, 0x0)
r0 = syz_mount_image$tmpfs(0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000d80)='./file0\x00', 0x0, 0x201)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80)='nl80211\x00')
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

21:36:45 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40)

21:36:45 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)='!\x00', 0x2, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:45 executing program 5:
socketpair(0x2, 0x2, 0x88, &(0x7f0000000040))

21:36:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x398, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

21:36:45 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:45 executing program 5:
sched_setparam(0x0, &(0x7f0000000140)=0x9)

21:36:45 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x21a001, 0x0)

21:36:45 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)='!\x00\x00', 0x3, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x398, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)

21:36:45 executing program 0:
syz_emit_ethernet(0x86, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d07c47", 0x10, 0x4, 0x0, @private2, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2c00}}}}}}, 0x0)

21:36:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x10}, 0x33fe0}}, 0x0)

[  543.797195][T20701] EXT4-fs (loop4): bad geometry: block count 4864 exceeds size of device (256 blocks)
21:36:45 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setgroups(0x0, 0x0)

21:36:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x390, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)

21:36:45 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)='!\x00\x00', 0x3, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:45 executing program 0:
setuid(0xee01)
io_uring_setup(0x1cf9, &(0x7f0000000100)={0x0, 0x0, 0x20})

21:36:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r0, 0xc0045878, 0x0)

21:36:46 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x390, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)

21:36:46 executing program 5:
set_mempolicy(0x2, &(0x7f0000000000)=0x8, 0x6)

21:36:46 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)='!\x00\x00', 0x3, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:46 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
write$vhost_msg_v2(r0, 0x0, 0xfffffffffffffcc9)

21:36:46 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))

21:36:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x390, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)

21:36:46 executing program 0:
waitid(0x0, 0x0, 0x0, 0x270ba6559a23bed8, 0x0)

[  544.062740][T20738] EXT4-fs (loop4): bad geometry: block count 4868 exceeds size of device (256 blocks)
21:36:46 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0xa80)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

21:36:46 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0x4, 0x0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001440)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000002300)={0xe3c, 0x41, 0x200, 0x0, 0x25dfdbfc, "", [@typed={0xe, 0x59, 0x0, 0x0, @str='/dev/vcs#\x00'}, @generic="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", @typed={0x4, 0x3f}, @typed={0xc, 0x4a, 0x0, 0x0, @u64=0x7ff}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0xc137}]}, 0xe3c}, {&(0x7f00000006c0)={0xe0, 0x23, 0x0, 0x0, 0x25dfdbfb, "", [@typed={0x8, 0x50, 0x0, 0x0, @fd}, @nested={0xc0, 0x77, 0x0, 0x1, [@typed={0x14, 0x91, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xa7, 0x34, 0x0, 0x0, @binary="551c8449586d4081f0eb6c89789adf48dba0547fcf0a9a7f4901d1cf37e0995d7f94425c61357ceceac3fdf4e7d066499ad3b910030b881a57f3472f09f16211a8008da37d2d483d999603e25e9cc1c42452d2d0d526dc2217aeb9602623fe9e383077ac74d07c808d25c71bf86b17b883879845e41e326f6e6207b1133bc24067c13e253f62ac6702a4b624ef3fb5777f528e0e25094dc2439b7686955e2e33b82694"}]}, @typed={0x8, 0x70, 0x0, 0x0, @pid}]}, 0xe0}, {&(0x7f00000007c0)={0x70, 0x25, 0x201, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x7, 0x5c, 0x0, 0x0, @str=':#\x00'}, @typed={0x57, 0x20, 0x0, 0x0, @binary="54d435b7d0693152b08293105f93265d6e8b72f8b0ca5175fef2f2ef347b6d0f5169b43eef67304ba50c170ee8f4aab0aa9032c32099e9c07abfa7c1920bfe8774ce71ddac65243d1351c31d926b8c377444cb"}]}, 0x70}, {&(0x7f0000000880)={0x60, 0x36, 0x1, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x39, 0x0, 0x0, @u64=0x9}, @generic="bb2b2fd2f036508b43a582feae0adff02286e623a68c4f88147e8dc85c2d7765d09d3d732db74b7543fcbc40c0e916529a1f948652d4323649847c9823653a5716fb8e"]}, 0x60}, {&(0x7f0000000c00)={0x10}, 0x10}, {&(0x7f0000000d40)={0x58, 0x28, 0x100, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x1a, 0x0, 0x0, @uid=0xee01}, @generic="3364b12137a51892eafeb05184ef8c4e7867e4c85567cfcdeee805bc92d0527d4c08fedd7b73", @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x58}, {&(0x7f00000010c0)={0x144, 0x1f, 0x0, 0x0, 0x0, "", [@generic="5e0111507893e2956448736e7ffdb90d9d644c30788fef578c4c5b81c046d4300772b511a860c691304b1f8e6b6df603cf5ea49c4277371e6c589fa4af216ded06d4a1065ed2ebf7056c4efa178f2e06dfeda65002c45b48a256ac2156780f9673d12afa4d75fd2dc5cd1d4d79d8d2", @typed={0xc4, 0x96, 0x0, 0x0, @binary="a9a398d25dae61760f22197bb5913c3a0d6e555dccb494c1638fafa1355da89f0687fffcbd09a782fb31e04ba7c736d188b92096d78e61e9cb6bceff6df5802ea1c31be7746f39f5950ab1f95bb7052f807390644cc378b2d8ba410a4df3b04ca4da6860d90d89bde7e46d5f97939303d92c7898e2d2699f94303dbab1e400289ed7aa2f205303ea73a75ee51ce4425955bfb5ddfae9979dcf0ae2776d5dec10d4a16f423d022c252635a8887d2f325c107f10741325b839a3e36efaff7037d7"}]}, 0x144}], 0x8}, 0x40)

21:36:46 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)

21:36:46 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:46 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0xa80)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

[  544.220433][T20758] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[  544.249640][T20762] binder: 20759:20762 ioctl 40046205 0 returned -22
21:36:46 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_uc}}, 0x0)

21:36:46 executing program 0:
r0 = openat$fb0(0xffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0)

[  544.270583][T20763] EXT4-fs (loop4): bad geometry: block count 5120 exceeds size of device (256 blocks)
[  544.272668][T20767] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT
21:36:46 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0x4, 0x0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:46 executing program 0:
socketpair(0x0, 0x8080d, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
socket$inet6(0xa, 0x61a166f2cbfa631f, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0)

21:36:46 executing program 5:
bpf$MAP_CREATE(0xb, 0x0, 0x0)

21:36:46 executing program 2:
socketpair(0x1d, 0x0, 0x0, &(0x7f0000001a00))

21:36:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:46 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:46 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0x4, 0x0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:46 executing program 0:
r0 = openat$dlm_control(0xffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x0, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)

21:36:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)

[  544.429003][T20785] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT
21:36:46 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0x4, 0x4008000, 0x0, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

21:36:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}, 0x0)

[  544.493920][T20786] can: request_module (can-proto-0) failed.
[  544.515418][T20786] can: request_module (can-proto-0) failed.
[  544.524123][T20790] EXT4-fs (loop4): bad geometry: block count 5124 exceeds size of device (256 blocks)
21:36:46 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000009d0000000000fd00000000ecdf40e65cc780220000000000000000000000000000000300100000000000000000000004000f00000000000000000000000000000000000000000000200000000000000000000000000000000001000000e8194f7e0000004000000000000100258d7a3500000000000000000000000000000000000000000000feffffff00000000000000f2ffffffffffffff74b6628ddfb1cc186d6300000000000000000073793a31ffffff7f00000000000000010000000000030000cf0a000000000000000000000900000000000fbc7f5c7e5ca781000000000000000000000000000016"], 0x12e)

21:36:46 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000001240)=""/4096, 0x26, 0x1000, 0x1}, 0x20)

21:36:46 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)="a8840893b63132f26d361185911450ed10d783f472a3bbfd", 0x18}, {&(0x7f0000002580)="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", 0xb32}], 0x2}, 0x0)

21:36:46 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  544.635668][T20807] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT
[  544.653174][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
21:36:46 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0x4, 0x4008000, 0x0, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  544.693157][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.726059][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
21:36:46 executing program 5:
r0 = getpgid(0x0)
get_robust_list(r0, &(0x7f0000000300)=0x0, &(0x7f0000000340))

[  544.755825][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.774696][T20818] EXT4-fs (loop4): bad geometry: block count 5380 exceeds size of device (256 blocks)
[  544.777721][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.784346][    T7] Bluetooth: hci0: command 0x0401 tx timeout
[  544.792028][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
21:36:46 executing program 1:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0x3c, 0x1, @link_local={0x0}}]}, 0x40}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000c995f80e2aff744ab2ec05070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES16], 0x4}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r4)
socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[  544.805065][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.812511][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.820225][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.827845][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.835215][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.842782][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
21:36:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x48011)

[  544.855232][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.866667][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.874147][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.882667][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.890350][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.898219][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
21:36:47 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0x4, 0x4008000, 0x0, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:47 executing program 0:
io_uring_setup(0x619f, &(0x7f0000006780)={0x0, 0x0, 0x8})

[  544.905836][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.915398][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.935054][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
21:36:47 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:47 executing program 5:
socketpair(0x2, 0x0, 0xffffffff, &(0x7f0000001ac0))

[  544.955299][   T54] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  544.963345][   T54] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
[  545.010654][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.025149][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.042491][T20849] EXT4-fs (loop4): bad geometry: block count 5636 exceeds size of device (256 blocks)
[  545.047118][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.059890][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.070169][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.078069][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.085763][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.093346][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.101445][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.108943][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.116359][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.124701][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.132336][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.141218][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.148850][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.156295][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.164874][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.172385][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.180241][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.196280][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.256946][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.272499][ T3789] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  545.287679][ T3789] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
21:36:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10)

21:36:47 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0001}]})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

21:36:47 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:47 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x84000, 0x0)

21:36:47 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002080)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00')
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0)

[  545.394775][T20871] EXT4-fs (loop4): bad geometry: block count 5892 exceeds size of device (256 blocks)
[  545.444147][   T34] audit: type=1326 audit(1606685807.501:112): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x7ffc0000
[  545.465190][   T34] audit: type=1326 audit(1606685807.501:113): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45deb9 code=0x7ffc0000
[  545.486465][   T34] audit: type=1326 audit(1606685807.501:114): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45deb9 code=0x7ffc0000
[  545.508471][   T34] audit: type=1326 audit(1606685807.511:115): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x7ffc0000
[  545.530494][   T34] audit: type=1326 audit(1606685807.511:116): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x45deb9 code=0x7ffc0000
21:36:47 executing program 1:
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece)
fcntl$setsig(r1, 0xa, 0x12)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x22040fb5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x16)

21:36:47 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:47 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})

21:36:47 executing program 5:

21:36:47 executing program 0:

21:36:47 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:47 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1a, 0x0, 0x300)

21:36:47 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)

21:36:47 executing program 5:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)

21:36:47 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  545.760022][T20893] EXT4-fs (loop4): bad geometry: block count 6148 exceeds size of device (256 blocks)
21:36:47 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @local}}}, 0x90)

21:36:47 executing program 5:
unshare(0xc000080)

21:36:48 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}, 0x10)

21:36:48 executing program 0:
r0 = socket$inet_tcp(0x2, 0xa, 0x0)
getpeername(r0, 0x0, 0x0)

21:36:48 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:48 executing program 5:
socketpair(0x1e, 0x1, 0x0, &(0x7f00000005c0))

21:36:48 executing program 2:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x894c, 0x0)

21:36:48 executing program 5:
socketpair(0x3, 0x0, 0x0, &(0x7f0000002bc0))

21:36:48 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

[  545.987100][T20920] EXT4-fs (loop4): bad geometry: block count 6404 exceeds size of device (256 blocks)
21:36:48 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890b, 0x0)

21:36:48 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:48 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x3, 0x0, &(0x7f0000000040))

21:36:48 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x90401, 0x0)

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:48 executing program 0:
r0 = socket$inet_tcp(0x2, 0xa, 0x0)
sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

21:36:48 executing program 5:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}, 0x10)

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

21:36:48 executing program 1:
syz_emit_ethernet(0x3f, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @empty, @private}, "de"}}}}}, 0x0)

[  546.160447][T20942] EXT4-fs (loop4): bad geometry: block count 6660 exceeds size of device (256 blocks)
21:36:48 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x89e9, 0x0)

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

21:36:48 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x141)

21:36:48 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000041b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:48 executing program 5:
socketpair(0x28, 0x0, 0x0, &(0x7f0000001b80))

21:36:48 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20008010)

21:36:48 executing program 2:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x38, 0x834, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x38}}, 0x0)

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

21:36:48 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)

21:36:48 executing program 5:
pselect6(0x7, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x3938700}, 0x0)

21:36:48 executing program 1:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))

21:36:48 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x1c0, 0x1c0, 0xffffffff, 0x2e0, 0x2e0, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@ipv6={@dev, @ipv4={[], [], @loopback}, [], [], 'bond_slave_1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@private1, @icmp_id, @icmp_id}}}, {{@ipv6={@private0, @local, [], [], 'macvlan1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

[  546.392528][T20970] EXT4-fs (loop4): bad geometry: block count 6916 exceeds size of device (256 blocks)
21:36:48 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x80000006, 0x4)

21:36:48 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCDELRT(r0, 0x8915, 0x0)

21:36:48 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x894c, 0x0)

21:36:48 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

21:36:48 executing program 1:
socketpair(0x1, 0x0, 0x0, &(0x7f00000019c0))

21:36:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x2c}}, 0x0)

21:36:48 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)=0x700)

21:36:48 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000016c0)={'tunl0\x00', &(0x7f0000001680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}})

21:36:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x303}, 0x14}}, 0x0)

[  546.612223][T20993] EXT4-fs (loop4): bad geometry: block count 8192 exceeds size of device (256 blocks)
[  546.626645][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
21:36:48 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000180)=""/245, 0x28, 0xf5, 0x1}, 0x20)

21:36:48 executing program 0:
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x9}, 0x0, 0x0, 0x0, 0x0)

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e)

[  546.654647][T21005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
21:36:48 executing program 5:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x6, 0x20, 0x20, @dev={[], 0x43}}, 0x10)

21:36:48 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e)

21:36:48 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40482, 0x0)
write$tun(r0, 0x0, 0x0)

21:36:48 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')

21:36:48 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)

21:36:48 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={[], [], @loopback}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}}, 0x0)

21:36:48 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0)

[  546.792703][T21021] EXT4-fs (loop4): bad geometry: block count 8960 exceeds size of device (256 blocks)
21:36:48 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f00000000c0)=0x3, 0x6)

21:36:48 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:48 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x8)
r0 = socket(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e)

21:36:49 executing program 1:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  546.885660][T21038] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[  546.908971][T21038] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
21:36:49 executing program 2:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0xc0}}, 0x0)

21:36:49 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20100, 0x0)

[  546.936050][T13170] Bluetooth: hci0: command 0x0401 tx timeout
21:36:49 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x109600, 0x0)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x64}}, 0x0)

21:36:49 executing program 3:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000000140)={0x0, 0x0}, 0x10)

[  546.990616][T21046] EXT4-fs (loop4): bad geometry: block count 9472 exceeds size of device (256 blocks)
21:36:49 executing program 5:
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
socketpair(0x21, 0x2, 0x2, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0)

21:36:49 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0xc020660b, 0x0)

21:36:49 executing program 2:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f0000000140)={0x0, 0x0}, 0x10)

21:36:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

21:36:49 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:49 executing program 3:
socketpair(0x18, 0x0, 0x5, &(0x7f0000000000))

21:36:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x301}, 0x14}}, 0x0)

21:36:49 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0xc}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3}], {0x14}}, 0xac}}, 0x0)

21:36:49 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100), 0x4)

21:36:49 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x89e7, 0x0)

[  547.165813][T21072] EXT4-fs (loop4): bad geometry: block count 9984 exceeds size of device (256 blocks)
21:36:49 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x101000, 0x0)

21:36:49 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002e00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:49 executing program 5:
socketpair(0x11, 0x2, 0x10001, &(0x7f0000000000))

21:36:49 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x2}, {}, {0xd}, {0x0, 0x1}]}, @ptr]}}, &(0x7f0000000140)=""/226, 0x52, 0xe2, 0x1}, 0x20)

21:36:49 executing program 2:
socketpair(0x22, 0x0, 0xffffffff, &(0x7f0000006040))

21:36:49 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f00000000c0)={0xfffffffffffffecc, 0x0}, 0x10)

21:36:49 executing program 0:
socketpair(0x18, 0x0, 0x2, &(0x7f0000000040))
syz_genetlink_get_family_id$mptcp(0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'})

21:36:49 executing program 1:
socketpair(0x2b, 0x80801, 0x8cee, &(0x7f0000000100))

21:36:49 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40)

[  547.332022][T21091] EXT4-fs (loop4): bad geometry: block count 11776 exceeds size of device (256 blocks)
21:36:49 executing program 2:
r0 = socket$inet_tcp(0x2, 0xa, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040))

21:36:49 executing program 1:
socketpair(0x21, 0x0, 0x0, &(0x7f00000000c0))

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x20}}, 0x0)

21:36:49 executing program 3:
syz_emit_ethernet(0x3f, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @empty, @private}, "de"}}}}}, 0x0)

21:36:49 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:49 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x1c0, 0x1c0, 0xffffffff, 0x2e0, 0x2e0, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@ipv6={@dev, @ipv4={[], [], @loopback}, [], [], 'bond_slave_1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@private1, @icmp_id, @icmp_id}}}, {{@ipv6={@private0, @local, [], [], 'macvlan1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

21:36:49 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "28c724d10fdb1c4f89cb7e820ffd39bdd95f0f18", "b997d9308e64d53d87b7ac2cbf299f73650a5c59"})

21:36:49 executing program 3:
socketpair(0x25, 0x5, 0x0, &(0x7f00000000c0))

21:36:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x49)

21:36:49 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x1c0, 0x1c0, 0xffffffff, 0x2e0, 0x2e0, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@ipv6={@dev, @ipv4={[], [], @loopback}, [], [], 'bond_slave_1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@private1, @icmp_id, @icmp_id}}}, {{@ipv6={@private0, @local, [], [], 'macvlan1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

21:36:49 executing program 5:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000200))

[  547.563346][T21121] EXT4-fs (loop4): bad geometry: block count 16384 exceeds size of device (256 blocks)
21:36:49 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000), 0x14)

21:36:49 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:49 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e24, @multicast2}], 0x20)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0)

21:36:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00')
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

21:36:49 executing program 1:
r0 = socket(0x18, 0x0, 0x1)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

21:36:49 executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffc8, 0x0}, 0x10)

21:36:49 executing program 5:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x4020940d, &(0x7f0000000000)={0x0, @ax25={0x3, @null}, @ipx={0x4, 0x0, 0x0, "3b2e5f7f3722"}, @sco={0x1f, @fixed}})

21:36:49 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="c30b6ec40000000008000a00", @ANYRES32=r4], 0x28}}, 0x0)

21:36:49 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001600)={'team0\x00'})

21:36:49 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

[  547.774253][T21145] EXT4-fs (loop4): bad geometry: block count 17408 exceeds size of device (256 blocks)
21:36:49 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt(r0, 0x0, 0x15, &(0x7f0000000280)="6fc86336", 0x4)

21:36:49 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@id, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)='e', 0x1}, {&(0x7f00000002c0)="05", 0x1}], 0x2}, 0x0)

21:36:49 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000006400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  547.852059][T21158] device vlan0 entered promiscuous mode
21:36:50 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000000140)={0x0, 0x0}, 0x10)

21:36:50 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="c30b6ec40000000008000a00", @ANYRES32=r4], 0x28}}, 0x0)

21:36:50 executing program 5:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x8936, 0x0)

21:36:50 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x4, 0x4)

21:36:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={[], [], @remote}, 0x7800}})

21:36:50 executing program 1:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)

21:36:50 executing program 5:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

[  547.988872][T21176] EXT4-fs (loop4): bad geometry: block count 25600 exceeds size of device (256 blocks)
21:36:50 executing program 0:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x8918, &(0x7f0000000000)={0x0, @ax25={0x3, @null}, @ipx={0x4, 0x0, 0x0, "3b2e5f7f3722"}, @sco={0x1f, @fixed}})

21:36:50 executing program 2:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x8916, &(0x7f0000000000)={0x0, @ax25={0x3, @null}, @ipx={0x4, 0x0, 0x0, "3b2e5f7f3722"}, @sco={0x1f, @fixed}})

21:36:50 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private1, @mcast1, @empty})

21:36:50 executing program 3:
pselect6(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x20000188})

21:36:50 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000038300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:50 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x5450, 0x0)

21:36:50 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}})

21:36:50 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000016c0)={'tunl0\x00', &(0x7f0000001680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev, {[@generic={0x0, 0x2}]}}}}})

21:36:50 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52f09ca67d515b31, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

21:36:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000011c0)='batadv\x00')

21:36:50 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x58}}, 0x0)

[  548.180905][T21202] EXT4-fs (loop4): bad geometry: block count 33539 exceeds size of device (256 blocks)
21:36:50 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000026cc00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x490)

21:36:50 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x89e3, 0x0)

21:36:50 executing program 5:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
connect$caif(r0, &(0x7f0000001380)=@dbg, 0x18)

21:36:50 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/226, 0x2e, 0xe2, 0x1}, 0x20)

21:36:50 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1, {[@generic={0x44, 0xc, "e48be9f6acda807eb8e5"}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}}}}, 0x0)

21:36:50 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0xb, 0x4})

[  548.343164][T21221] EXT4-fs (loop4): bad geometry: block count 52262 exceeds size of device (256 blocks)
21:36:50 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1, {[@generic={0x44, 0xc, "e48be9f6acda807eb8e5"}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}}}}, 0x0)

21:36:50 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000003f700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:50 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @ipv4={[], [], @remote}}})

21:36:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt(r0, 0x0, 0x0, 0x0, 0x0)

21:36:50 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {}]}]}}, &(0x7f0000000140)=""/226, 0x36, 0xe2, 0x1}, 0x20)

21:36:50 executing program 5:
socketpair(0x15, 0x5, 0xff, &(0x7f0000000000))

21:36:50 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000003c0)=""/74, 0x0, 0x4a}, 0x20)

21:36:50 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x0, @local}, @hci, @isdn})

[  548.523674][T21248] EXT4-fs (loop4): bad geometry: block count 63235 exceeds size of device (256 blocks)
21:36:50 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(r0, &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x1010, 0x0, 0x0, "11d9252f7610d149006378a1b1daeb4529df6865793e3320b9057541ce9eb5dd1dc92ec9039f8bbd1144188291902f797529fb0b3eda30231ee3398b3a7640abea417d8050b6b4ca82e6c1fcdb5f9d6d45574d0c95bb407ac4e35c68da51833444003dd58e02733b0b426905084dafe2a47b1c517c29b5b216a32a6a5a8f19e40671d4d46fd807d0cc1abc003000b255a22e7bd13f4f9d19cbafe8f60db1b421fbd5baeb6edd92a1915e04babb251af5168a30eb1293feace812b8b3445e8bfce5ccac35293928cbd985945938a8e79de62836375e9fa1c5f050ed145f0030fa806923e6bc8d5e5d41672ca7af4043f7dd49fd9d503c2a60df311ba65e80581b3ac7817e97641b1d54554f7bcd22d737edadf720ee29d65d00bee6f9433bc3c7ad5850d9f332e1b30210c96b0b40eee305dfad44cf75d1ef7641b74c6ff8f8c8edf099c8763a49cf31fb5988641d5956b78a2ab0c979cf124aee3edb7e67fe0b6cb24ebc15101fdc9f0f42220369d074ca744f02a58b0d89300487a634e6358b53cb136d18c6ea1a0ea4c96682b35e36210c2a6e47dabd55f8c88586c59b77e37bd3c4eeec53738b09fdcbf1c06bad3b49e0eeae82e676157f1f4c199333aa3369b57f14a092bdede12e725e1f1e1b111d794f8bd3b8ff42e0dc226f308ce52aa2f9f97099d789935ed28eca56c7a0a0a2e0895dbc0fd6c7e9c9e5abdbff4204ff514563e3b4df27f10f2ba344029bf1bd36e39c68ab1a6edef0949665b0424d548d64d3a7c0016ea60b451f0e2cc116155db9051f454629a67f512ebf0a96036eb39adacbefcf0dc7f29fea7173b8c5a886f54bd3f03481e3a3de369cb6036b2fddbaa1c19bc2d075c38fefb569ad28ebd518c8fb4830d9e2145111c1b846ed3df93d53a231481fce49871837635faab54fd6524748ea08fd473004ddc25f49779f8d7a24fca4403bb9c460e66209bd3bc8e059aa2cce386e6666a642449ff13b86b57cb1f6228158e924546743164eae8607fc3e5644d3910c98cced38032282f24ebe63da88cc5d9ddd5370e3e288591dcb38c037f1554347c99c7c0be99b765dcbf73a4eb16725ee83a1d0f5f4598e2f3c58f7e261c73aa9c37002cffe81bd6a6c0cd69177f4f4734acd3f4c4e29758ac5c2734886f1be941fa41f3f26417f384375937da28790d226006e0301734c6c51ea16f64faf3fe399fd6ac98ff28c29048db0ef0e88d7331fab5974eef01827fea8ca97f8c28e5bbcd32a79305b813baf0cfaddfb33e9ab805d51af9c4bcdeb3e0dc97420bf608596f6112f2c4d9b4e174c8c91181b0457d09522361917d4a15057f3f40eef2e799442c8e56e75708a85f569ca086d48b188690f12b96a668b895b08bf805286e090593b9dcf6919c2f31fc3287052775b721b804c6f252fad619598202f8194e223a2efe7c75d5c1d0cb78c34c2fa530e388a072946327c640c4edeb0643087720717d47b285d0e0e44ddebb4d042f5ac07e38e1ee11cfa0df53fc5d5d358d017e27a5a2577f0236ffb5e9afcdbe5c44d5e766cc0dfc9210895008469448c50767d0200b10700c492cf359ff61e40be6b86ddff06bb4c2970c66d38cb5eec796cca845c9cc1427d7cfaa569cc069fcdd37bcbffec8f45b83a40ce514107a1b23bd93f67e8b30aff68c509fd9982e8b2ff70076ac9f5d4d4919aeb3dc113fcbfe38d6d4b25a248f48e4212f2b6c483b3be694aac750d594b8852803e9aa3ea8299c34a215500f663a4df2c8c51de4e9c0df9c7bd9b4784b8ef143b67ad316d9aa85f50dedf95e7c4bc2786923d616b3a59430a05f8a402263c77b6e35a6c3160b9b47bcea71b82b931e1bd450032bd1aacc66f5aebc9d7e4150a83333087624e8e78f51b9140630f49cb581a4ea130f5ae6a525e3cadd00deea8bb958b521e2d8de9da81555c5526ed00d04e36d16a7ad4174ef7f40a953000ebc71700bd58e982db89adfe8779b7957d9cffb0bf525fc33a0ad1aac537cd423f6dedf0bdc433ed779a0a262d0e7efcafd44cf3c89874d93c4843695b00765052dcff4c48c1cb4bfddbd0f9bc82fed91e4bda4b4aea2fde8fe7e13a15ba70f2370da9eb7953df709194c3ddd18e94fa944d5e39cd8d9602f715f9bda0cee1a1b2a8a0ad103ed432040af7eae8e3d3d03ca1cc80c836c46b3d8186f7f6698914141b7aa02c8fe5ce9b0bef736e148cac32e180ecc8b4e3e923c38e8711820e438de97cc553b89daa06010c2954e399d734cdaba383ffbdc1aaf9418ab66f1170df64794acf351319505a3a259a09ed19a634ef5885a52c6617f104c887d8ba323cde80b26759dc81ebecc9205218a475ded67ce843b304f1656aa78e1a8286acd44271d308906a423e942f499ae8a7c9a1d96ac9d681129264e45aeaf04e1714fc343e917f190ef2db3cfa4a6a20934686f2d21e8d072d5229fce18c46e6f2c44657163837c357fa63eb83a37d93376a98a1dab08b47265a3c9180522389c8d5c9e58e65db80c86f425efdadc89f36a7aaaf412296c33e44396ed4ecbebc746dbc7962df7c881952d989a72840ebf8cc2607d13f23e04d4e194881fcccba9ddf2d707b23d74a4ea63344188f7e7426ed6f193b5b14efc59771c49c54ae0dd3ad139c7add111ea81d1188d8d7727b2c38f671a1dab5098e56235652de28c14665d08a8f5c89e55ee0e2e698204a410a9cf081deb3708106a3f146d793f7362eaef81107044a91427de681fce8f229cb5105ef901303fd3ed4959cd1dd19a8d74f853664bce7040ffc6de639b640163c18e44b6a0ffcf9ee2541d33104e09b217e0e9ef29076778908dcd7fa6905fd7b6f604607d68b97879104359649db4bd677d886929775bf359ef446b8ae61a18677a915d857fd505905b885c859ad3ff08983aafc8ae4620f3c1f0a68916ebd9593b896c4accaac67a839bbc4bde3b0dd30dad0f24a920350dfe3dc25528b61b4312c8baa48b06d4d46bb2c02b95d6015d99610c74c9ae821c9a169ae853781de0f4edf1c4313d589e59f987fcf41fb9040537111ce6a9ad82a6213c9c1f3b56d7846507657116cce81a4706ea9a2588497866d46326b0d2b0ca5fd702c76900e627ca4b48a030753ec76270cb3580399aab67f395f4816178f2ecfc26be607c27d84748fea62136a27ed71aec08ffa4978f765fed169d97bda120bf4841d8410ff558a8635437b68ee73836515eb8baa50b1d2190f66f5dac526347e303282147750424f6819875199824f31a8fd79b582ace8a758700b433542b2d032794186767b56c8899111b539380196af776081dceacfcffc6f21a6cb94bd5e41501a1a76d1b4807e92b95e8c71642f48dc53367d17baf186c979dd8fa4b9d9cb599307c088d8325d0fd82d5b3876566c41acef9a88b1be98cc2d28636f46c1bfba39c7b74824b035aeb8e9f172e30f967b90949ae8c1744da2601301c6bdffec1ec946f4b1c1c85a2130a49dd142511e3a493e21fff781c6a9ac2565744ffe7e2e843c901c575aee69d76d3be581adea2d2c6c920713d118cfc1f44c0e8692f90299963af9d5186e526f7c6c21e99eecbb4b3309115d8ed0c785f84e70706b583eb7ddaf3f41e51c0da5ca6f62f71198d90ad199aeb5ff366d2984bf80bb0671bf39919ace16f8a3515f31840973b7b0cd9bc095146de63f011a1a9110336a9bacf3cfe222f1a55b94f6b3ab002a07398d2791f2fc644bf53dc75753d3291290ea62cbe093f011eed6227f95156d12870b4a1c8b6b846216c01f154d65a007c42ad73fa8314d5d894433d6621e3304a56f976aa1873a6f4338ff97cccd98359bf730c2c026920a25baf0a6ce2ec9765c4c34a2dc04780d624342fa46067fc889a018588d011b3a959b3292c4fdf31e3f79bec58f012d26c4894101cf4eaf42a1a09aa4b2e37e6be2859e4299bd7c2f345186301ca74007837c7e7c22699116147cc9aeafadc6e792d81a716f767c23c45bd862932e79a12e332534f93e2463f79f9b88550e3d9f614ad75071312e7c956c08b188ffcce8617ccd39438ffdf8d435de9b151f9aa32aba69098d1575495626574381b43b010c516ebcd9df7f5b39bba29ee2354bcd657d8f61daa204d10f0aa0e577c83a4882fa1958c148e59f8cc891c098e2340ef32875584d4efc4f7f25abb32a770149cdaaebfe6b207c7555c08a0e3b5508b901fd968c0831fde112ee2daed97b1718d39f977f4b880895d0f054f42ab437d61d3b719e32bd5dec09368fb3e13ebfb407c3c496010bbfb3d87940760eb4b263d57c723274b25e45be3234358d7457cb0e4298a00956bc694efd977be2de6f9b29b4201c4d65bbb0505ebbebada72f8c903ffd7fe6be75fa524997687eeb88670a05a1601a7aec0e90240b2d9069e0566f223f245ff7c3277e2e0342ab5e173a3bd1f8395a2d2de9b32068e7ac73ae6b6aafb3b879fd81ce870e040683c39a580fb11bde1ed1f01734448d3b4c9835823a8e014ee195a87691489b3ab38ec0dd99e12c9d6135ff966d278927d505c8730f0e42076881b998fc72f58ed61c1c5cdec45e96ff9527b6027c527d0aa0a1fef6c954e95f31438ecb74ba0e41ca8c05eff61e2d95b89a90a01a0de060af164e963c50be03d3c42216e17637e42e9b48f93a9926b4350f642270e3e2fe4823f59bd4133f000de8f93ceef5f55c1f7e7d86fee867cfd3cd19b6829f737f5becd2df6caf6722cd2d445169b748ecc9e2c528c3d1c27ddaddb573100e2769ac114df14c0770afc9bd8daf2bc9be100ed5c2db0e65d8e1db27f779055f20eaec669bb6b94e1ba3ec4442667dcf1895725b41448521222ef521452960709735fc64c88c34e6141d4234e8b6cfcce34a8a3797cd11df737f10123ee29afa243980762259671b6f2d5e2dd4cb4bc29f4670a9f22e7917d01cdecb10be53b57742111d29ae4d8038757ef16172a41a34b2566d067c852a2e8c640352986b5a32d67c120f00094edf757a58265932dba5c294be0a760c959e0d00234347c195a0afe67868f3e439044730ab6425ad7f1f38060125f232611c70feeefbe86a9ccf717338511c1e7e33efd7689e0a0a77ca28b631090d500ae1247fb9377be11c9887ac7ee988ec59d3ce3d8db62eb4871cdb1c0fe7ca647f7c230d0f7bc0e361563268dae40574af6f2f9e4476f5118041fe5a878f50d7d59b805f9d94a121687cbfc5feec80420508e1a4f0738ec1c9ef82be646fce2d95018f0951c40cc2fd5c4c2be0a7ba0c363e6a4237916ce5dca68351bab1f352a0769d5a48e0f434336f12f5db14a2e13191cd9eac521ec35a393add692ddac92b9e09669526a5ffe067cce8d9a7957dd30bc435db949b34a60ec09759acf12ca7af157510c54ee259b0ab8b08cd18b813fe20c7981fb63d506bbccb43562c527b389a6ee7aee1772a89bfd905f8ee471cc14eb48cb970a278de99fe7928483a4b13ec8a6709b817ebd77a3f05c8465d0f0db5e9a2cf18f11801c723f5772422130e08dea2b02612978565ff12abbcdea480890c074b6ab5d9bd76b0e560e2eedc7e42fdb7faf89585009cea2c66fcff3ff868aea4effe586a5546a28b26af510483e2be5964849de9339c940b55bcd59e44cb4c9700f0d6800d6a22edbcb61fe5171a923ab196cc05c792eaec716b416e4463e19dae5ec44cc9e16d361f99c4036087efe3d6b38f5a90359fa5f662c1de48e13d4e4bf572e22bf2047fa6b974f0531bd773bd2e9658df8e37b9b3130c9cd4"}, {0xf0, 0x0, 0x0, "ebd757736bb4927cdaf4f1a4ad8af1b68cd05952fbacdde02de0817d1876a92551062425cad54f5aab0d7a31961ac18e44b1c13b93bcad6c38497bd5dcfc1d0dd82de991ad91c8e8408be95c5d265a3fb443c75da532cf8c672505de1dfa157e7707efb606844a31af02017f6121cc55ab9bc1057060adb7cef43ab606e1647822e51fd01bf1f202c48b13120924d3c0707488180bbac44fab7bd5ba3b52c152dac857e4522db3754506f331658f15b55f082fc3170e0421197a3c4841ddeea301763ed0c6400c8edf59b6629fcce404776272987c7edd4e99"}, {0xf08, 0x0, 0x0, "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"}], 0x2008}, 0x0)

21:36:50 executing program 5:
r0 = socket$phonet(0x23, 0x2, 0x1)
recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

21:36:50 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff})

21:36:50 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-neon\x00'}, 0x58)

21:36:50 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000200000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:50 executing program 2:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x80108906, 0x0)

21:36:50 executing program 1:
syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x2}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @private}}}}}}, 0x0)

21:36:50 executing program 0:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000016c0)={'tunl0\x00', &(0x7f0000001680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x27, 0x0, @empty, @dev}}}})

21:36:50 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@id, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)='e', 0x1}, {&(0x7f0000000380)="89", 0x1}], 0x2}, 0x0)

21:36:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x201}, 0x14}}, 0x0)

21:36:50 executing program 2:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x40010, 0x0, 0x0)

[  548.757695][T21274] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (256 blocks)
21:36:50 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x7, 0x1, 0x8d, 0x1}, 0x40)

21:36:50 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@RTM_GETMDB={0x18, 0x56, 0xec1d2716283e2b35}, 0x18}}, 0x0)

21:36:51 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCDELRT(r0, 0x890d, 0x0)

21:36:51 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000000c0)={0x3, @default})

21:36:51 executing program 2:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r0, &(0x7f00000017c0), 0x18)

21:36:51 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:51 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@id, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)='e', 0x1}, {&(0x7f0000000380)="89", 0x1}], 0x2}, 0x0)

21:36:51 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0)

21:36:51 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000180)=@id, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f00000002c0)="05", 0x1}, {&(0x7f0000000380)="89", 0x1}], 0x3}, 0x0)

21:36:51 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000140)=""/226, 0x26, 0xe2, 0x1}, 0x20)

21:36:51 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x0, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="8c", 0x1}], 0x1}, 0x0)

21:36:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0xec4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb5, 0x3, "80fbbb09276fb89e1c219083d821292756391cfd454983b3c5149686b6a2e0d6c30332676051bb1e57505ef33afb308336fa8a2d39126a73d91da996091c04a5b0015576ca4f0370d53181c987d95d1a8ab0545d4c2f6677b294316bb7472ce3b3f94fc7dbbb193f8fecc7951425d89f50ce9a6d824cf61a47ef4997688f623f952db9010e4846b80be701a2fef202071a64b48e049ef1989c415a3a9f46812e1300fb9912ca024043100eab6688d8b78a"}]}, @TIPC_NLA_NODE={0xdf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xded, 0x3, "ffba86ba172c14150355c5a866aec83487f576a13d471aadf8b01b5f483fd2d3bd1c73eac4def91ac9e03b606733142014bcbb37c58760ece1cedb8137b64b60f78f7a227f565774fd3e0fc2df5e2b124aa13254c6d6aedcbe074211e9a9f7d05f69900e8056bb2e29dd2d53acc7527a3a9a4e5dce3e969b46d019d1dc147ced0a63fa65275006ea532b0c4cf8a9801c8abd60edd6cbcda3a64dcef6ccd8a8c57ea47c08e62d275766818459a3c303a87740c83dc77a4bb3e490fcd1a7d246c5d388ceb4c674b987488fcec692428dbd29e4f88e85282b6a74d461d6e7f8da2fa1facbac1be3023015390427aaeb8574f435e1dc5499f4c5992dc40c1f6b1319936966fbba1b44eabdef9973900eb870d161a2281f901e670fc5cf91659854df74ac9b02a3fb43315d92595b11ae24a8c72966dc44f724cf208a41ae0360191c8861c83c0d40e49e30b08de91b51beb51533046d2ba942a15f196d76d23349c16c59fa76dc77824e8e116458401849bf305039f5464afdca95930c4ceb0447937c0cd351e28da884de160f818bd024fc017164a195bfc8632278d6461f5cb5d3834a6ee1e891d4f5125febeb185c5c81e7a8ccd342032a6ca0e9354a6d394aba4b57168b41f9e1ab049faf532106c681c0030c05ae50a2f399b303a8e43cd997da2d89a98fda9ff6b97844360869c16208ff14555d70404e5f7bb0b7bcdc563dbb211894d5a460d081b36c53f9e701273e6c08b6c95488c736b409e163daa520ff33a13755d8912cb0567eda78663a52d176b4b667578a48d04f2bf69c6be8c4ef48587add3f91369922ca85be120b80a460195235ef76e44c12e50d28ff41be709bed1c9a40be45f725c2d4249a67d1b7e3fb37bef7247affa970ac9712eb07dca33bfed34065c7aad1f3738000245b50374498d8437a8a53b9974637d6311c8b7c93e3f7ed34c6a1323ab6a54a6f0074b69e35b7966e93fd5470d4940f2dbbea77b74d29fd315349cd3de212c0b4845599b5e5c9d795287c1e718b689df3d0e4bb683456b53af61ea6fffc52645963543a1a5f745d7d4643886f100fb02e40068508fb8384c8a6d0e4d5547ac084ce7d835ee00e215744617e84142640acd4b00d20cf2a83dbd156057b9c24f098ce04f8c2266080430601112c66d35296dc4d9d23d0996a879f82d477d5e122dfddf9d025ac14d2052b645e2feaf0d12b9fea0a5bd36e79d933d3e685761ce070122012c40dacb8a8ce0bc7b6276c7979dc7d52e69e330229820d5805825bbcbbb33043807ff6f70f8551ec7ff7d39a1cadbd187351d8bce2aa3be0a3b297f68c465090e9bf8d3a8f93e00ea80de9ee0cdc5a6e2d7bac3ae5fca561adb1ecdecf5d0c246cfd9727c8c7e6551a28e65954309128eb9773725b733e8b9ffc5c8d99f542485cfef41e185d6ef5ec1e580838dcadc31c03f149528fa52e73876d6b3115e8d3584afeadf0698f062e428dc47bcf25940ea0daf0cd5ce310d2a51aecc16dd8bc12cf1fcd76758459ae5fd8fd8872fc8ea152000077fc7e454834cf94b59edb61f38040dab9e71a338c33b1375f9bfe1264fb5174a287ded1b129d2f2f9690bf3c02528f74010e8ddc7e951c1006f46c14919e63ee558248aa22e8ea6cc4b5332094df6bd4afad2384ea2ed4480abfc88be5dbf882ea9a81c713d09df1ac10dd66ba8414ea12fbd21eecbb2d9b5fce23dac83004c8086b8a2e2cda751c0c3bf55a6ec72d1b4e4a6150d45c4d8e5ab014723403dfcef7299dac99a280bb5a468d5c0c4daedfdae2dd5d2d7d38da92571d52c53ec28e5b990a8ab9169c808ac934cf8d49960dc4fe4160308969a261c8c9f20824730003a37cde840034249d069da7ad8776f18497a559c3a430ebda52841f068845ac3951c835501c43160ddad17ed16af7e47ba85ed5657e5fed5bc23e35d760509808acbf08706f33605dd1e5df2731da9b8030562e5d8697ec7a9772cc2eba803c89616637aecd9e990056809e8aa9a2944e66a51f07581258219e97602a2b87d5dcccf490d2fc4cd217a7b2235d230c4b39207d706620f347e05cc69aada221b82751542970aac22ecd50ea64b593ba81a8b4d6fca4e47212d3e16a5f4daee9c53c23dab9869017f8c15ee81c719384d82415f18d19d3445b872bddc279981bc97388fd18869ce5fd3f9b65b94b98e7bbcc5c838b5948076a4631ac1c8a40e7f5d82b091c7f0e665f73340f99db8aa0ff7e78f52f5cf9a5773daf85472ed4bd2e356d41a51f8c8dc03ffed8440e4879db8328a09a2ae09fc0e0ea0c91adf5f010dede8f974c4c21714bd8f7c2e5b23f5731090f93315cb6e062b712dfdcc63ea069c13d80800c42aec9f6689fbe2b91e794cf0c4c252e9625b8c930a5be8aa1126c32bb285c00a36c35e7bdcf7437c726478ff5b7cbf672468208cdf1e8646d24b9163b900d854089e8af88d8ed2d1622b6a52dd2be8cbad92329758c0329720013f15ef9d59f5136d80701ff3ea97389625fa8b4d85ad822a889daddf86a166f72a5dd156da7d4f06c649298568e822eb55597d9d3b43835cb63763de94060e017568ab065de6403a64b8c0ad3b75c3630398bed78bc8cc11f87b6339dbb5998290c259ed1eda4ffcdcb0b9194cda4881112ca7f22586710275d41ad82c0d6d5748da369a0b7712a8a25b999db43f3c51f203eb020b5ee934a15dafff758c242fabdd793a3657143f6f06ec06753c7b3381f1b0134b0e82cf15e157f2803c7cb396d046c587844a3f09a481200b66f2cbabb182096bbedff2e742d852fc4cfdfc2f68866170f56d01877e7e523b2fffd551f4499169571cb216b6ba7937d69af942cecdc905d15cb2fb3c7f035a5cdb076b9006651f7e772d56f772c2ac67f505656e08bb1252cffca6aad27f0f4a55f9fe016433650ffc55d32ff303a7846a970197f088495e2f596b5c83bc1a3d209a4fe433fa4d7f137e500aad9a9bd7c985a0af3027d80b54e1007a427d712837dae2a993f7216492c1b9b8d7529a09728011e2b411c0855a6bb8d069d466a7c9321f8090cb1b811c75c363233eac339cbe0284cbdbe871561d749afa68a985830cbffdd348d48dcbef37c478d951471fd1089b43a8db281281bd99213c7a1ef4ae3e9f72f5cf839259e0d3be617f0d74dfb4a52646cc83d29d8264703476f2c00e8d299b9b2ddffb9873b47c4ab625369ce92afc4a569443bc199fb29d325550e7ea07911fb3682de946059768ae6c839f331d16c66f5642d6a933efb53f1ecc6d04c0ebc72336bbf08886c859c6e196e65db8023c886eae864d60bec5d50aafd5e9dec3d954f6f062f0c41cb5533b3f5fb03f828cef61ed94ef70fd9732d46eef7f2cfdb5d55a36dd7fad5ac81ed81f6137b3006e74716a580ae33e403abcf5c7d98f7fef5444e110a21baffeda75a93e9acb86eeb15cbb812e84115eb46f97a056c05b57a4b5824f98d8d4d61d420814ce19eaf2232489a79ff0ddc5b399c931fdb08e692e4d2a8856d8724d49e7753c89743a7e6ce12c35b4797172a0bc5e66e3a0a731a5b6b774fa3263e6c09b216bec0664d1f3411e6b9f5fbbf1863159b78e993d4758d864589d709233d9ae09e6b730cc18a4fea7378dc825a3cfa0382f50b52781854e492a188286eb013c1afcd58b225cbd9038426e07d80489c5b7e8dba74a6c94a420c43c08d9f59b6f04f2a3b6a8c9abb0a9ec9e6fc777122f42aaefb6a4a20b668f438c6132aaff28d9d35e87e80f08a457dc88522c691374d21e639be6667e70c63e88fde7e6c4a453f65fca17c94e839d4d6d25d7c93bfa0ff823cec5d46ec4db0c8bdb1fad367df5384f86e83362f99683c9da5546ff541cebbe62100c56b6e54360774277ce2619da13b2c14eee89b8e358bfacd9f5131a95bd1a3f55008957ef98d8b71da63d7a60ebae7c90a3fbd32c0ef59a0d6c44a7e168c04f395fbe30563017390c39a6036253d24219706b5a21f2bfad0d51ce5d48852a269c9c3757870a4b29a5b04380ecd476fcf40558eccb8f88b7fcdec24ba72670274f3bb929acf7eb518e2abf62a113d7f1a100d8603964efa50b4bec56eef934d65c31d999eff136d876e395ce75c8057d14f84e3d38767b1671c8cb95de944a4f0b46c494df6251abf34baa5b2fd766d86fd42cf6149e46c3bdf174793dd523a46bc03fe68d1189db2b047a5abf38a55bb4355b59ca7c89735282a46d74654c3cbd8e98d7163023a2741e1fb6549ebed1847dc10ff0269eb87d34c4edf36a93a21593d0995aff07bd874e9e52b5604408f0b2bb0a8573aa366b8c3eded12146062145264b6b04e3cbb84f755975fa53b2725de865d0470edceda503d70012e13b71669af3b0f9650df7f4c70be6bcc0a8937dc86c0b017bbec9610faa638d7ba8a1aabccce6fdf26f7797ff2d37ae8a421a915a25c90cb3dcd8c08376f03a501f4a7a6530fdaaf7227eba55d20e1fc54d7b5ad91026b717d9a7161bc41f2bf0870263417955bbfc6718aee3c86a6ab7a60c9c7f0703e63b5535b9039236d722d26c13f5f1331c783c5f2cf5661df47eec4f1b692b84fdd901ee5a47254a75dc47661bc49fe52baf33727a5c78cbfc4d5c4562e5755f685d8db6e8f13e1af085244ff544ff97ee0e857c2187ba4cbe815df099301e0680d7d1f9825d977583251976b58dc8956193576de981762d58097a681adba914465929ca0d6c6017d70a5f0928432cc5488986ab13bfdeebb3d3302afa1e7e4c6fa63e020a0f5cc900fc15a81cd4b805e3b9996507dc6f9512090b4c9d7de8dbdc9800dbbc3fe195f7fdc4a1d9c2b155e046bf167fc3e6c9c27d6a8fb5d48623bc5804744d179d58384562e9b2b2611b72e1bd8aeb9708989527e48c5a4f0d08de72f945daf98beedb9107e2c5c62bffee38ca7ff41ba4a60ec8c3d345732f5523c184884b83e35f51cadb1e28b5591cbad54fe48428bcee50f2f040b558fd16604221fc3e0f3a0c154b59a20af7c5d7b11450d86043211580c9"}]}]}, 0xec4}}, 0x0)

[  549.618056][T21315] EXT4-fs (loop4): bad geometry: block count 768 exceeds size of device (256 blocks)
21:36:51 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCDELRT(r0, 0x541b, &(0x7f0000000000)={0x0, @ax25={0x3, @null}, @ipx={0x4, 0x0, 0x0, "3b2e5f7f3722"}, @sco={0x1f, @fixed}})

21:36:51 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x89e8, 0x0)

21:36:51 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:51 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

21:36:51 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x10)

21:36:51 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x1)

21:36:51 executing program 3:
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x9, 0x0)

21:36:51 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{}]}}]}}, 0x0)

[  549.843879][T21338] EXT4-fs (loop4): bad geometry: block count 1024 exceeds size of device (256 blocks)
21:36:52 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

21:36:52 executing program 1:
link(0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

21:36:52 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:52 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast2}})

21:36:52 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000740)='/dev/input/event#\x00', 0x100000000, 0x0)
ioctl$EVIOCGSW(r0, 0x8040451b, 0x0)

[  550.029970][T21357] EXT4-fs (loop4): bad geometry: block count 1280 exceeds size of device (256 blocks)
21:36:52 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000600000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:52 executing program 0:
syz_open_dev$evdev(&(0x7f0000001040)='/dev/input/event#\x00', 0x3, 0xca00)

21:36:52 executing program 0:
syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x0, 0x6081)

21:36:52 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  550.162433][T21369] EXT4-fs (loop4): bad geometry: block count 1536 exceeds size of device (256 blocks)
[  550.225177][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  550.255167][T13170] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  550.255230][ T3251] usb 3-1: new high-speed USB device number 17 using dummy_hcd
21:36:52 executing program 0:
syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x123400)

[  550.282925][T21379] EXT4-fs (loop4): bad geometry: block count 1792 exceeds size of device (256 blocks)
21:36:52 executing program 3:
syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x7ff, 0x0)

[  550.416763][    T7] usb 6-1: device descriptor read/64, error 18
[  550.455152][T13170] usb 2-1: device descriptor read/64, error 18
[  550.466428][ T3251] usb 3-1: device descriptor read/64, error 18
[  550.685199][    T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  550.725182][T13170] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  550.745167][ T3251] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  550.875158][    T7] usb 6-1: device descriptor read/64, error 18
[  550.915146][T13170] usb 2-1: device descriptor read/64, error 18
[  550.965107][ T3251] usb 3-1: device descriptor read/64, error 18
[  550.996851][    T7] usb usb6-port1: attempt power cycle
[  551.035901][T13170] usb usb2-port1: attempt power cycle
[  551.095123][ T3251] usb usb3-port1: attempt power cycle
[  551.705149][    T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  551.745115][T13170] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  551.795171][    T7] usb 6-1: Invalid ep0 maxpacket: 0
[  551.835513][T13170] usb 2-1: Invalid ep0 maxpacket: 0
[  551.845169][ T3251] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  551.945097][    T7] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  551.945148][ T3251] usb 3-1: Invalid ep0 maxpacket: 0
[  551.985119][T13170] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  552.035631][    T7] usb 6-1: Invalid ep0 maxpacket: 0
[  552.041229][    T7] usb usb6-port1: unable to enumerate USB device
[  552.075131][T13170] usb 2-1: Invalid ep0 maxpacket: 0
[  552.080718][T13170] usb usb2-port1: unable to enumerate USB device
[  552.105101][ T3251] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  552.205195][ T3251] usb 3-1: Invalid ep0 maxpacket: 0
[  552.211217][ T3251] usb usb3-port1: unable to enumerate USB device
21:36:54 executing program 5:
syz_open_dev$evdev(&(0x7f0000000800)='/dev/input/event#\x00', 0x2, 0x0)

21:36:55 executing program 2:
syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000740)='/dev/input/event#\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000a80)='/dev/input/event#\x00', 0x0, 0x0)

21:36:55 executing program 1:
syz_open_dev$evdev(&(0x7f0000001040)='/dev/input/event#\x00', 0x6, 0xca00)

21:36:55 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000800000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:55 executing program 0:
syz_open_dev$hiddev(&(0x7f00000012c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)

21:36:55 executing program 3:
syz_open_dev$hidraw(&(0x7f0000001000)='/dev/hidraw#\x00', 0x0, 0x359c43)

21:36:55 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, 0x0)

21:36:55 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))

21:36:55 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

21:36:55 executing program 3:
syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x81, 0x6081)

21:36:55 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/5)

[  553.058711][T21410] EXT4-fs (loop4): bad geometry: block count 2048 exceeds size of device (256 blocks)
21:36:55 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/103)

21:36:55 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000900000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:55 executing program 2:
syz_open_dev$hiddev(&(0x7f0000002480)='/dev/usb/hiddev#\x00', 0x0, 0x402)

21:36:55 executing program 3:
syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000a80)='/dev/input/event#\x00', 0x0, 0x0)

21:36:55 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0)

21:36:55 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000480)=""/203)

21:36:55 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x28000)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x7fffffff)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x0, 0xffffffe0])
ioctl$EVIOCSFF(r0, 0x40304580, 0x0)
syz_open_dev$evdev(&(0x7f0000000800)='/dev/input/event#\x00', 0x2, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000b00)=""/253, 0xfd)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[  553.244474][T21432] EXT4-fs (loop4): bad geometry: block count 2304 exceeds size of device (256 blocks)
21:36:55 executing program 1:
syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x101000)

21:36:55 executing program 0:
syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000740)='/dev/input/event#\x00', 0x100000000, 0x0)
syz_open_dev$evdev(&(0x7f0000000a80)='/dev/input/event#\x00', 0x0, 0x0)

[  553.586315][    T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd
21:36:55 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x0)

21:36:55 executing program 3:
syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x6cf, 0x80180)

21:36:55 executing program 0:
stat(&(0x7f0000000000)='./file0\x00', 0x0)

21:36:55 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000a00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:55 executing program 1:
unlink(&(0x7f0000000200)='./file0\x00')

21:36:55 executing program 0:
openat(0xffffffffffffffff, 0x0, 0x0, 0x80)

21:36:55 executing program 1:
mkdir(&(0x7f0000000280)='./file1\x00', 0x8)
rename(&(0x7f00000002c0)='./file1\x00', 0x0)

21:36:55 executing program 5:
fchdir(0x0)

[  553.725831][T21465] EXT4-fs (loop4): bad geometry: block count 2560 exceeds size of device (256 blocks)
21:36:55 executing program 3:

[  554.105091][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  554.114560][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.128797][    T7] usb 3-1: Product: syz
[  554.132972][    T7] usb 3-1: Manufacturer: syz
[  554.141832][    T7] usb 3-1: SerialNumber: syz
[  554.185266][    T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  554.754929][    T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  554.957528][T13170] usb 3-1: USB disconnect, device number 21
[  555.814818][    T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  555.822061][    T7] ath9k_htc: Failed to initialize the device
[  555.834525][T13170] usb 3-1: ath9k_htc: USB layer deinitialized
[  556.204799][T13170] usb 3-1: new high-speed USB device number 22 using dummy_hcd
21:36:58 executing program 1:

21:36:58 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000b00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:58 executing program 2:

21:36:58 executing program 3:

21:36:58 executing program 0:

21:36:58 executing program 5:

21:36:58 executing program 1:

21:36:58 executing program 0:

21:36:58 executing program 3:

21:36:58 executing program 5:

21:36:58 executing program 2:

[  556.382074][T21516] EXT4-fs (loop4): bad geometry: block count 2816 exceeds size of device (256 blocks)
21:36:58 executing program 1:

21:36:58 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000c00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:58 executing program 5:

21:36:58 executing program 3:

21:36:58 executing program 2:

21:36:58 executing program 1:

21:36:58 executing program 0:

21:36:58 executing program 5:

21:36:58 executing program 3:

21:36:58 executing program 2:

21:36:58 executing program 5:

[  556.606833][T21535] EXT4-fs (loop4): bad geometry: block count 3072 exceeds size of device (256 blocks)
21:36:58 executing program 1:

21:36:58 executing program 0:

21:36:58 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000d00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:58 executing program 3:

21:36:58 executing program 2:

21:36:58 executing program 1:

21:36:58 executing program 5:

21:36:58 executing program 0:

21:36:58 executing program 3:

21:36:58 executing program 2:

21:36:58 executing program 1:

[  556.797053][T21550] EXT4-fs (loop4): bad geometry: block count 3328 exceeds size of device (256 blocks)
21:36:58 executing program 5:

21:36:58 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000f00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:58 executing program 3:

21:36:58 executing program 2:

21:36:58 executing program 0:

21:36:59 executing program 1:

21:36:59 executing program 5:

21:36:59 executing program 0:

21:36:59 executing program 3:

21:36:59 executing program 2:

[  556.965920][T21567] EXT4-fs (loop4): bad geometry: block count 3840 exceeds size of device (256 blocks)
21:36:59 executing program 0:

21:36:59 executing program 1:

21:36:59 executing program 5:

21:36:59 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001000000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:59 executing program 0:

21:36:59 executing program 2:

21:36:59 executing program 1:

21:36:59 executing program 3:

21:36:59 executing program 0:

21:36:59 executing program 5:

21:36:59 executing program 2:

21:36:59 executing program 3:

21:36:59 executing program 1:

[  557.175532][T21582] EXT4-fs (loop4): bad geometry: block count 4096 exceeds size of device (256 blocks)
21:36:59 executing program 0:

21:36:59 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:59 executing program 2:

21:36:59 executing program 5:

21:36:59 executing program 3:

21:36:59 executing program 1:

21:36:59 executing program 0:

21:36:59 executing program 5:

21:36:59 executing program 3:

21:36:59 executing program 2:

[  557.365489][T21599] EXT4-fs (loop4): bad geometry: block count 4352 exceeds size of device (256 blocks)
21:36:59 executing program 0:

21:36:59 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:59 executing program 1:

21:36:59 executing program 5:

21:36:59 executing program 2:

21:36:59 executing program 1:

21:36:59 executing program 3:

21:36:59 executing program 5:

[  557.532772][T21615] EXT4-fs (loop4): bad geometry: block count 4864 exceeds size of device (256 blocks)
21:36:59 executing program 0:

21:36:59 executing program 2:

21:36:59 executing program 1:

21:36:59 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:59 executing program 0:

21:36:59 executing program 3:

21:36:59 executing program 5:

21:36:59 executing program 1:

21:36:59 executing program 2:

21:36:59 executing program 0:

21:36:59 executing program 5:

21:36:59 executing program 3:

21:36:59 executing program 1:

[  557.734252][T21631] EXT4-fs (loop4): bad geometry: block count 5120 exceeds size of device (256 blocks)
21:36:59 executing program 2:

21:36:59 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002300000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:36:59 executing program 5:

21:36:59 executing program 3:

21:36:59 executing program 2:

21:36:59 executing program 0:

21:36:59 executing program 1:

[  557.891209][T21645] EXT4-fs (loop4): bad geometry: block count 8960 exceeds size of device (256 blocks)
21:37:00 executing program 5:

21:37:00 executing program 2:

21:37:00 executing program 3:

21:37:00 executing program 1:

21:37:00 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002500000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:00 executing program 0:

21:37:00 executing program 2:

21:37:00 executing program 3:

21:37:00 executing program 1:

21:37:00 executing program 5:

21:37:00 executing program 5:

21:37:00 executing program 2:

21:37:00 executing program 0:

[  558.082654][T21660] EXT4-fs (loop4): bad geometry: block count 9472 exceeds size of device (256 blocks)
21:37:00 executing program 1:

21:37:00 executing program 3:

21:37:00 executing program 1:

21:37:00 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002700000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:00 executing program 1:

21:37:00 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
ftruncate(r1, 0x208200)
sync()
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x76d)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

21:37:00 executing program 3:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21:37:00 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00')
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)

21:37:00 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0)

21:37:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80a1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21:37:00 executing program 2:
prctl$PR_SET_MM(0x39, 0x0, &(0x7f0000ffd000/0x2000)=nil)

[  558.313192][T21682] EXT4-fs (loop4): bad geometry: block count 9984 exceeds size of device (256 blocks)
[  558.327665][T21684] FAT-fs (loop0): bogus number of FAT sectors
[  558.339630][T21684] FAT-fs (loop0): Can't find a valid FAT filesystem
21:37:00 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8919, &(0x7f0000000040)={'gre0\x00', 0x0})

21:37:00 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1600bd5b, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:00 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

21:37:00 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x1000}, 0x10)

21:37:00 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000002e00000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:00 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0)
ioctl(r0, 0x937c, &(0x7f00000002c0)="0100000000000000180100000500000300000000000000002f")

[  558.460958][   T34] audit: type=1804 audit(1606685820.522:117): pid=21703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir728711037/syzkaller.NKZFme/1146/file1/bus" dev="sda1" ino=15810 res=1 errno=0
[  558.542723][T21712] EXT4-fs (loop4): bad geometry: block count 11776 exceeds size of device (256 blocks)
[  558.583655][   T34] audit: type=1800 audit(1606685820.562:118): pid=21703 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15810 res=0 errno=0
[  559.210861][T21696] FAT-fs (loop0): bogus number of FAT sectors
[  559.218368][T21696] FAT-fs (loop0): Can't find a valid FAT filesystem
[  559.274571][   T34] audit: type=1804 audit(1606685821.332:119): pid=21703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir728711037/syzkaller.NKZFme/1146/file1/bus" dev="sda1" ino=15810 res=1 errno=0
21:37:01 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', 0x0})

21:37:01 executing program 3:
fanotify_init(0x0, 0x20000)

21:37:01 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}})

21:37:01 executing program 2:
prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x2000)=nil)

21:37:01 executing program 1:
prctl$PR_SET_MM(0x29, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:01 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000004400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  559.325779][   T34] audit: type=1804 audit(1606685821.392:120): pid=21737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir728711037/syzkaller.NKZFme/1146/file1/file1/bus" dev="sda1" ino=16145 res=1 errno=0
21:37:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8953, &(0x7f0000000040)={'gre0\x00', 0x0})

21:37:01 executing program 1:
unshare(0x20000200)

21:37:01 executing program 3:
prctl$PR_SET_MM(0x67, 0x0, &(0x7f0000ffd000/0x2000)=nil)

[  559.432498][T21749] EXT4-fs (loop4): bad geometry: block count 17408 exceeds size of device (256 blocks)
21:37:01 executing program 5:
syz_io_uring_setup(0x1bfb, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

21:37:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0)

21:37:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:01 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000006400000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:01 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu, @generic, @call, @map, @func, @ldst], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

21:37:01 executing program 3:
r0 = getpgrp(0xffffffffffffffff)
ptrace$getenv(0x4201, r0, 0x0, 0x0)

21:37:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'vlan0\x00'})

21:37:01 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r3, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2, 0x0, 0x0, 0x8]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0)

21:37:01 executing program 3:
perf_event_open(&(0x7f0000001b80)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x64}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21:37:01 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
flistxattr(r0, 0x0, 0x0)

21:37:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.645956][T21769] EXT4-fs (loop4): bad geometry: block count 25600 exceeds size of device (256 blocks)
21:37:01 executing program 5:
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

21:37:01 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18040000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10)
syslog(0x4, &(0x7f0000001400)=""/59, 0x3b)

21:37:01 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000003000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:01 executing program 3:
r0 = openat$vcsa(0xffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x101)

21:37:01 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]})
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

21:37:01 executing program 5:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100430000000000000028000000280000000300f5000000"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)

21:37:01 executing program 2:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munlockall()

21:37:01 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x7, 0x0)

[  559.834211][T21803] EXT4-fs (loop4): bad geometry: block count 196608 exceeds size of device (256 blocks)
21:37:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000008303000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:02 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

[  559.944570][T21811] BPF:No data
[  559.954259][T21817] BPF:No data
21:37:02 executing program 1:
prctl$PR_SET_MM(0x3, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:02 executing program 3:
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000030000000000000001000002"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)

[  560.003434][   T34] audit: type=1804 audit(1606685822.062:121): pid=21812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir728711037/syzkaller.NKZFme/1150/file1/bus" dev="loop0" ino=58 res=1 errno=0
[  560.057318][T21825] EXT4-fs (loop4): bad geometry: block count 230144 exceeds size of device (256 blocks)
[  560.069349][T21812] attempt to access beyond end of device
[  560.069349][T21812] loop0: rw=2049, want=92, limit=87
[  560.105192][T21812] Buffer I/O error on dev loop0, logical block 45, lost async page write
[  560.115613][T21812] attempt to access beyond end of device
[  560.115613][T21812] loop0: rw=2049, want=94, limit=87
[  560.115626][T21812] Buffer I/O error on dev loop0, logical block 46, lost async page write
[  560.130018][T21836] BPF:[1] PTR (anon) 
21:37:02 executing program 5:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21:37:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000f703000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  560.159043][T21836] BPF:type_id=0
[  560.159473][T21812] attempt to access beyond end of device
[  560.159473][T21812] loop0: rw=2049, want=98, limit=87
[  560.172459][T21837] BPF:[1] PTR (anon) 
[  560.199141][T21836] BPF: 
21:37:02 executing program 2:
prctl$PR_SET_MM(0x17, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:02 executing program 0:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x0)

21:37:02 executing program 1:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10)

21:37:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18}, 0x40)

[  560.202354][   T34] audit: type=1804 audit(1606685822.262:122): pid=21839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir728711037/syzkaller.NKZFme/1150/file1/bus" dev="loop0" ino=58 res=1 errno=0
[  560.214002][T21837] BPF:type_id=0
[  560.233726][T21836] BPF:vlen != 0
[  560.247707][T21836] BPF:
[  560.247707][T21836] 
21:37:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x19, 0x4)

[  560.289583][T21837] BPF: 
[  560.294477][   T34] audit: type=1800 audit(1606685822.262:123): pid=21839 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=58 res=0 errno=0
[  560.314792][   T34] audit: type=1804 audit(1606685822.302:124): pid=21841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir728711037/syzkaller.NKZFme/1150/file1/bus" dev="loop0" ino=58 res=1 errno=0
21:37:02 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
sync()
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x76d)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  560.315807][T21837] BPF:vlen != 0
[  560.359563][T21847] EXT4-fs (loop4): bad geometry: block count 259840 exceeds size of device (256 blocks)
21:37:02 executing program 3:
prctl$PR_SET_MM(0x1c, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:02 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00')
read$FUSE(r0, &(0x7f0000005000)={0x2020}, 0x2020)

[  560.384535][   T34] audit: type=1800 audit(1606685822.302:125): pid=21841 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=58 res=0 errno=0
21:37:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000000001d0002013f733e4b96b2080000004af52ce0b9232a0000000000070000006b7b70ddedb5cf00005de11fee00000300000000010000000000e87674e8bb", @ANYBLOB="14fa"])
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80, {0x0, 0x0, 0x3}}, "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", "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"})

21:37:02 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3}, 0x40)

[  560.465988][T21837] BPF:
[  560.465988][T21837] 
21:37:02 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001004000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  560.502271][T21862] FAT-fs (loop2): bogus number of FAT sectors
21:37:02 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}, 0x8)

21:37:02 executing program 1:
waitid(0x0, 0x0, 0x0, 0xe000000c, 0x0)

[  560.611968][T21862] FAT-fs (loop2): Can't find a valid FAT filesystem
[  560.630879][   T34] audit: type=1804 audit(1606685822.692:126): pid=21885 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir436076747/syzkaller.yQciDn/1744/file1/bus" dev="sda1" ino=16182 res=1 errno=0
21:37:02 executing program 5:
syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

21:37:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:02 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f0000000040)={'gre0\x00', 0x0})

21:37:02 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000001400)=0xb931)

[  560.724892][T21888] EXT4-fs (loop4): bad geometry: block count 266240 exceeds size of device (256 blocks)
[  561.246671][T21862] FAT-fs (loop2): bogus number of FAT sectors
[  561.254422][T21862] FAT-fs (loop2): Can't find a valid FAT filesystem
21:37:03 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
sync()
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x76d)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

21:37:03 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}})

21:37:03 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001104000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:03 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0)

21:37:03 executing program 1:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)

21:37:03 executing program 1:
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)

21:37:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1600bd5c, &(0x7f0000000240)={0x0, 0x0}, 0x8)

[  561.444956][T21933] EXT4-fs (loop4): bad geometry: block count 266496 exceeds size of device (256 blocks)
21:37:03 executing program 1:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  561.507200][T21940] FAT-fs (loop2): bogus number of FAT sectors
[  561.544407][T21940] FAT-fs (loop2): Can't find a valid FAT filesystem
21:37:03 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001204000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:03 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}, 0x8)

[  561.709327][T21968] EXT4-fs (loop4): bad geometry: block count 266752 exceeds size of device (256 blocks)
21:37:04 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00')

21:37:04 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00')
sendfile(r0, r1, 0x0, 0x800000080004103)

21:37:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0)

21:37:04 executing program 3:
fanotify_init(0x6c, 0x0)

21:37:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001304000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  562.452778][T21987] EXT4-fs (loop4): bad geometry: block count 267008 exceeds size of device (256 blocks)
21:37:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001404000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:04 executing program 5:
r0 = openat$vcsa(0xffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020)

21:37:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:04 executing program 3:
openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000030000000000000001000002"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)

21:37:04 executing program 1:
syz_io_uring_setup(0x1ec9, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)

21:37:04 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18040000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = timerfd_create(0x8, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
r3 = socket$inet6(0xa, 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vlan0\x00', <r5=>r4})
r6 = syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', <r7=>r5, 0x4, 0x1, 0x1, 0x0, 0x48, @remote, @private1={0xfc, 0x1, [], 0x1}, 0x0, 0x8, 0x3, 0x20}})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="200025bd7000fc0000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="79de650c5852044dabbb9a4fba958f3abb13509808cc381ba69f8cd6bb10eb69a5ef9cfe00bb3116d3"], 0x24}, 0x1, 0x0, 0x0, 0x8008000}, 0x8040)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r6, 0x417, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0a000600ffffffffff"], 0x40}}, 0x8010)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x10c0, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_FRAME_MATCH={0x93, 0x5b, "0456282c4208b163fe96b4ae3c478717f875e7aa93ece8aee0a1d7ef9752fa2b002e631a1e5bd4d189c7710ed72718715658b679d62d67084e1088e2a841d3f5767d7dc6a0459d1f7a569b31844d38504c6c61fdbf5c9244a807e5db46e05e44f0a514708801aa5973846c0953b62dc8cfadd6c0f59947c4b8715981bd36786f72f499ffdc9a8622d93e379666be1e"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x40000}, 0x40801)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r9=>0x0})
timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x0, r9+10000000}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r1, &(0x7f00000000c0))

21:37:04 executing program 3:
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$vhost_msg_v2(r0, &(0x7f0000000740)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440))

[  562.654780][T22005] EXT4-fs (loop4): bad geometry: block count 267264 exceeds size of device (256 blocks)
[  562.668221][T22009] BPF:[1] PTR (anon) 
[  562.672383][T22009] BPF:type_id=0
[  562.677475][T22009] BPF: 
[  562.682390][T22009] BPF:vlen != 0
[  562.686003][T22009] BPF:
[  562.686003][T22009] 
21:37:04 executing program 2:
futex(0x0, 0x3, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0)

21:37:04 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001504000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:04 executing program 5:
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe07558955b3a1b39)

21:37:04 executing program 1:
timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38c9d9c51afea9a8}, 0x0)

21:37:04 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:04 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x2, 0x1a, 0x0, 0x0)

21:37:05 executing program 5:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}}], 0x1, 0x0)

[  562.886326][T22037] EXT4-fs (loop4): bad geometry: block count 267520 exceeds size of device (256 blocks)
21:37:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:05 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001604000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:05 executing program 2:
rt_sigsuspend(&(0x7f0000000100), 0x8)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)

21:37:05 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x40)

21:37:05 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f0000000040)={'gre0\x00', 0x0})

21:37:05 executing program 1:
socketpair(0x11, 0x3, 0x9, &(0x7f0000000200))

21:37:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x89b1, &(0x7f00000000c0)={'tunl0\x00', @ifru_map})

21:37:05 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x40)

[  563.129180][T22068] EXT4-fs (loop4): bad geometry: block count 267776 exceeds size of device (256 blocks)
21:37:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:05 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001704000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:05 executing program 5:
keyctl$restrict_keyring(0xb, 0xfffffffffffffffd, 0x0, 0x0)

21:37:05 executing program 1:
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x800)

21:37:05 executing program 3:
io_uring_setup(0x1127, &(0x7f0000000080)={0x0, 0x1000102, 0x8})

21:37:05 executing program 5:
r0 = openat$vsock(0xffffff9c, &(0x7f0000002300)='/dev/vsock\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0xffffe000, 0x0, 0x10, r0, 0x0)

[  563.371907][T22091] EXT4-fs (loop4): bad geometry: block count 268032 exceeds size of device (256 blocks)
21:37:06 executing program 2:
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, <r0=>0x0}, 0x2020)
getegid()
r1 = openat$kvm(0xffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x121002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r0}, 0xffffffffffffff90)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r2, {0xb41}}, 0x18)

21:37:06 executing program 3:
socket(0x10, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000400))
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x20000050)

21:37:06 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

21:37:06 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x14, 0x14, 0x101, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:06 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001804000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8946, &(0x7f00000009c0)={'syztnl2\x00', 0x0})

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  564.013892][T22124] EXT4-fs (loop4): bad geometry: block count 268288 exceeds size of device (256 blocks)
21:37:06 executing program 5:
r0 = openat$vcsa(0xffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x0, 0x0)
syz_io_uring_setup(0x1024, &(0x7f00000022c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)

21:37:06 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001904000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:06 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x10000)
lseek(0xffffffffffffffff, 0x0, 0x0)
sync()
truncate(&(0x7f0000000180)='./bus\x00', 0x0)

21:37:06 executing program 1:
prctl$PR_SET_MM(0x3a, 0x0, &(0x7f0000ffd000/0x2000)=nil)

[  564.152688][T22152] EXT4-fs (loop4): bad geometry: block count 268544 exceeds size of device (256 blocks)
21:37:06 executing program 2:
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, <r0=>0x0}, 0x2020)
getegid()
r1 = openat$kvm(0xffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x121002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r0}, 0xffffffffffffff90)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r2, {0xb41}}, 0x18)

21:37:06 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)

21:37:06 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:06 executing program 1:
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2)

[  564.234856][T22162] FAT-fs (loop3): bogus number of FAT sectors
[  564.250050][T22162] FAT-fs (loop3): Can't find a valid FAT filesystem
21:37:06 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x5456, &(0x7f0000000000)={0x0, 0xfe})

21:37:06 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001a04000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:06 executing program 5:
r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
dup2(r0, r1)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})

21:37:06 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6800000010000507000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062"], 0x68}}, 0x0)

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  564.391897][T22162] FAT-fs (loop3): bogus number of FAT sectors
[  564.407985][T22162] FAT-fs (loop3): Can't find a valid FAT filesystem
[  564.416947][T22192] EXT4-fs (loop4): bad geometry: block count 268800 exceeds size of device (256 blocks)
[  564.451065][T22202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  564.463464][T22202] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
21:37:06 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x10000)
lseek(0xffffffffffffffff, 0x0, 0x0)
sync()
truncate(&(0x7f0000000180)='./bus\x00', 0x0)

21:37:06 executing program 2:
mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/4)

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:06 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9f1618532febfbffffff00"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)
syz_open_procfs(0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)={0x3d, 0x6f, 0x0, {0x4, [{0x80, 0x2}, {0x0, 0x4, 0x2}, {0x0, 0x0, 0x7}, {0x2}]}}, 0x3d)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000dc0)={<r1=>0x0, 0x4, 0x3})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000011c0)={r1, "891f7cd9ff99d91b79bdbc2a323bc814"})
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3)

21:37:06 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000001b04000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:06 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000012c0)={'gre0\x00', &(0x7f0000001300)=ANY=[]})

21:37:06 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

[  564.552335][T22218] BPF:btf_header not found
21:37:06 executing program 5:
mbind(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000100)=0x8, 0xe5, 0x0)

21:37:06 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f00000001c0)=@raw=[@alu, @generic, @call, @map, @func, @ldst], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

21:37:06 executing program 1:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280001000002000000000000"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:06 executing program 2:
timer_create(0x7e5ff7148a326f50, 0x0, &(0x7f0000000080))

[  564.662220][T22224] EXT4-fs (loop4): bad geometry: block count 269056 exceeds size of device (256 blocks)
[  564.699269][T22238] FAT-fs (loop3): bogus number of FAT sectors
[  564.751159][T22248] BPF:Invalid section offset
[  564.766828][T22250] BPF:Invalid section offset
[  564.772439][T22238] FAT-fs (loop3): Can't find a valid FAT filesystem
21:37:06 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:06 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000005000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:06 executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x56, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="44da76781cbf", &(0x7f00000001c0)=""/122, 0x0, 0x0, 0x0, 0x0})

21:37:06 executing program 1:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xc81)

21:37:07 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

[  564.923207][T22266] EXT4-fs (loop4): bad geometry: block count 327680 exceeds size of device (256 blocks)
21:37:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x80, 0x14, 0x40}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0)

21:37:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:07 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'\x00', @ifru_names})

21:37:07 executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000020000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:07 executing program 5:
bpf$MAP_CREATE(0x2, &(0x7f0000000080), 0x40)

21:37:07 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'vlan0\x00'})

21:37:07 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8904, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

21:37:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:07 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8919, &(0x7f0000000000)={0x2, 'vlan0\x00'})

21:37:07 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

[  565.170726][T22308] EXT4-fs (loop4): bad geometry: block count 2097152 exceeds size of device (256 blocks)
21:37:07 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0)

21:37:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xeb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+$!-[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':\\\xc7{:$@\x1b\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe55, 0x5, "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"}]}]}, 0xec4}}, 0x0)

21:37:07 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00')

21:37:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000021000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:07 executing program 2:
mbind(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100), 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munlockall()

21:37:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  565.322874][T22335] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
21:37:07 executing program 1:
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

21:37:07 executing program 2:
syz_io_uring_setup(0x737c, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x66c3, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

21:37:07 executing program 1:
bpf$MAP_CREATE(0x1d, &(0x7f0000000080), 0x40)

[  565.369696][T22340] EXT4-fs (loop4): bad geometry: block count 2162688 exceeds size of device (256 blocks)
21:37:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x541b, &(0x7f00000009c0)={'syztnl2\x00', 0x0})

21:37:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000022000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

[  565.414823][T22348] kvm [22337]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[  565.446821][T22335] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
21:37:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0})

21:37:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:07 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0)

[  565.518850][T22372] EXT4-fs (loop4): bad geometry: block count 2228224 exceeds size of device (256 blocks)
21:37:07 executing program 2:
syz_io_uring_setup(0x737c, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x66c3, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

21:37:07 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x40049409, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

21:37:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000023000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x4}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0)

21:37:07 executing program 1:
prctl$PR_SET_MM(0x21, 0x7, &(0x7f0000ffd000/0x2000)=nil)

[  565.678734][T22395] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  565.692194][T22394] kvm [22388]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
21:37:07 executing program 2:
prctl$PR_SET_MM(0x1b, 0x0, &(0x7f0000ffd000/0x2000)=nil)

[  565.741658][T22404] EXT4-fs (loop4): bad geometry: block count 2293760 exceeds size of device (256 blocks)
21:37:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:07 executing program 2:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7fffffff}, 0x8)

21:37:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0)

21:37:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}}, 0x0)

21:37:07 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8953, &(0x7f0000000000)={0x2, 'vlan0\x00'})

21:37:07 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000024000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:08 executing program 2:
keyctl$restrict_keyring(0x7, 0xfffffffffffffffd, 0x0, 0x0)

21:37:08 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}})

[  565.926128][T22430] kvm [22425]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
21:37:08 executing program 3:
get_mempolicy(0x0, &(0x7f0000000040), 0x395cc461, &(0x7f0000ff9000/0x4000)=nil, 0x4)

21:37:08 executing program 5:
mbind(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x9, 0xe5, 0x0)
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2)
mlock2(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x0)

21:37:08 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0)

[  566.022034][T22440] EXT4-fs (loop4): bad geometry: block count 2359296 exceeds size of device (256 blocks)
21:37:08 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)

21:37:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:08 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
sync()
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
truncate(&(0x7f0000000180)='./bus\x00', 0x76d)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

21:37:08 executing program 5:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/229)

21:37:08 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000025000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:08 executing program 2:
prctl$PR_SET_MM(0xe, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.218401][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  566.218444][   T34] audit: type=1804 audit(1606685828.282:129): pid=22466 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir142493658/syzkaller.wpFwla/1829/bus" dev="sda1" ino=15954 res=1 errno=0
21:37:08 executing program 3:
prctl$PR_SET_MM(0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  566.273004][T22473] EXT4-fs (loop4): bad geometry: block count 2424832 exceeds size of device (256 blocks)
21:37:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00')
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0)

21:37:08 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000026000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:08 executing program 5:
prctl$PR_SET_MM(0xf, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x80000, 0x0, 0x1}, 0x40)

21:37:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  566.476011][T22493] EXT4-fs (loop4): bad geometry: block count 2490368 exceeds size of device (256 blocks)
[  567.019190][   T34] audit: type=1804 audit(1606685829.082:130): pid=22517 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir142493658/syzkaller.wpFwla/1829/bus" dev="sda1" ino=15954 res=1 errno=0
21:37:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4)

21:37:09 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74)

21:37:09 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18040000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x0)

21:37:09 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000cc26000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:09 executing program 1:
io_uring_setup(0x15f8, &(0x7f0000000000)={0x0, 0x3c93, 0x3b})

21:37:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240), 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  567.141391][   T34] audit: type=1804 audit(1606685829.202:131): pid=22519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir142493658/syzkaller.wpFwla/1829/bus" dev="sda1" ino=15954 res=1 errno=0
21:37:09 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)

21:37:09 executing program 1:
syz_io_uring_setup(0x2009bc, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

21:37:09 executing program 5:
socketpair(0xa, 0x0, 0x107, &(0x7f0000000000))

[  567.228049][T22531] EXT4-fs (loop4): bad geometry: block count 2542592 exceeds size of device (256 blocks)
[  567.246537][T22530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
21:37:09 executing program 2:
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040), 0x0, 0x0)

21:37:09 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000027000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240), 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  567.297138][T22548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
21:37:09 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x5437, &(0x7f0000000000)={0x0, 0xfe})

21:37:09 executing program 1:
prctl$PR_SET_MM(0x26, 0x0, &(0x7f0000ffd000/0x2000)=nil)

21:37:09 executing program 3:
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000080)=0x6, 0x900, 0x0)

21:37:09 executing program 2:
r0 = openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0)

[  567.384710][T22562] EXT4-fs (loop4): bad geometry: block count 2555904 exceeds size of device (256 blocks)
21:37:09 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000627000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240), 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:09 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)

21:37:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000000001d0002013f733e4b96b2080000004af52ce0b9232a0000000000070000006b7b70ddedb5cf00005de11fee00000300000000010000000000e87674e8bb", @ANYBLOB="14fa"])
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0x80, {0x0, 0x0, 0x3}}, "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", "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"})

21:37:09 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_flags})

21:37:09 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x40)

21:37:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  567.581395][T22588] EXT4-fs (loop4): bad geometry: block count 2557440 exceeds size of device (256 blocks)
21:37:09 executing program 5:
socketpair(0x2c, 0x3, 0x1, &(0x7f0000000000))

21:37:09 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000044000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

21:37:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000000240)={0x0, &(0x7f0000000200)}, 0x8)

21:37:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f0000000240)={0x0, 0x0}, 0x8)

21:37:09 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x364, 0x0, 0x5802, 0x294, 0x1b8, 0x294, 0x29c, 0x378, 0x378, 0x29c, 0x378, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x194, 0x1b8, 0x52020000, {}, [@common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv4=@multicast1, [], @ipv6=@private1, [], @ipv4=@dev, [], @ipv6=@remote}}}, @common=@unspec=@quota={{0x38, 'quota\x00'}, {0x2}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c0)

21:37:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000000140)={0x0, 0x0}, 0x8)

21:37:09 executing program 2:
bpf$MAP_CREATE(0x6, 0x0, 0x10)

[  567.782060][T22618] EXT4-fs (loop4): bad geometry: block count 4456448 exceeds size of device (256 blocks)
21:37:09 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ca689630c1c1af, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74)

21:37:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0xfe, 0x700})

21:37:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0xfe, 0x700})

21:37:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:10 executing program 2:
uname(&(0x7f0000000080)=""/245)

21:37:10 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, 0x0)

21:37:10 executing program 1:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r0, 0xc0a8a5a8e68c35d, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0x0)

21:37:10 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000081000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:10 executing program 5:
openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000030000000000000001000002"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)

21:37:10 executing program 2:
socketpair(0x10, 0x3, 0x2, &(0x7f0000000100))

21:37:10 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}, 0x8)

21:37:10 executing program 1:
r0 = socket(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xc0}}, 0x0)

[  568.008602][T22652] EXT4-fs (loop4): bad geometry: block count 8454144 exceeds size of device (256 blocks)
[  568.021661][T22657] BPF:[1] PTR (anon) 
[  568.035588][T22660] BPF:[1] PTR (anon) 
[  568.041635][T22657] BPF:type_id=0
[  568.075549][T22660] BPF:type_id=0
[  568.079034][T22660] BPF: 
[  568.092284][T22657] BPF: 
[  568.093947][T22660] BPF:vlen != 0
[  568.098903][T22660] BPF:
[  568.098903][T22660] 
[  568.112482][T22657] BPF:vlen != 0
21:37:10 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000086000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:10 executing program 1:
syz_io_uring_setup(0x76c6, &(0x7f0000000380), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x2298, &(0x7f0000000480)={0x0, 0x84c5, 0x0, 0x0, 0xcd}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540))

[  568.130268][T22657] BPF:
[  568.130268][T22657] 
21:37:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:10 executing program 5:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x5}]}, 0x24}}, 0x0)

21:37:10 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}})

21:37:10 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0xfe})

21:37:10 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffa)

[  568.253840][T22691] EXT4-fs (loop4): bad geometry: block count 8781824 exceeds size of device (256 blocks)
21:37:10 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8912, &(0x7f0000000040)={'gre0\x00', 0x0})

21:37:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4)

21:37:10 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0xfe})

[  568.378798][   T34] audit: type=1800 audit(1606685830.442:132): pid=22702 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=59 res=0 errno=0
21:37:10 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000000bf000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:10 executing program 5:
bpf$PROG_LOAD(0x11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

21:37:10 executing program 3:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000600000028000000280001000002000000"], &(0x7f0000000380)=""/249, 0x43, 0xf9, 0x8}, 0x20)

21:37:10 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x8971, 0x0)

21:37:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:10 executing program 2:
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, <r0=>0x0}, 0x2020)
getegid()
r1 = openat$kvm(0xffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x121002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r0}, 0xffffffffffffff90)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xb41}}, 0x18)

[  568.504006][   T34] audit: type=1800 audit(1606685830.472:133): pid=22715 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=59 res=0 errno=0
[  568.540873][T22721] EXT4-fs (loop4): bad geometry: block count 12517376 exceeds size of device (256 blocks)
21:37:10 executing program 5:

21:37:10 executing program 1:

21:37:10 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001000004000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:10 executing program 1:

21:37:10 executing program 1:

21:37:10 executing program 5:

[  568.679874][T22741] BPF:Unsupported section found
[  568.700018][T22749] BPF:Unsupported section found
21:37:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:10 executing program 2:
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

[  568.744497][T22738] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  568.768814][T22738] ext4 filesystem being mounted at /root/syzkaller-testdir762036537/syzkaller.yuVBZK/1361/file0 supports timestamps until 2038 (0x7fffffff)
21:37:10 executing program 3:

21:37:10 executing program 5:

21:37:10 executing program 1:

21:37:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:10 executing program 3:

21:37:10 executing program 5:

21:37:11 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000102000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:11 executing program 2:

21:37:11 executing program 1:

21:37:11 executing program 3:

21:37:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

21:37:11 executing program 5:

21:37:11 executing program 2:

21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f0000000240)={0x0, 0x0}, 0x8)

[  569.047700][T22786] EXT4-fs (loop4): bad geometry: block count 131328 exceeds size of device (256 blocks)
21:37:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

21:37:11 executing program 2:

21:37:11 executing program 1:

21:37:11 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000103000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:11 executing program 5:

21:37:11 executing program 2:

21:37:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

21:37:11 executing program 3:

21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 3:

21:37:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  569.273913][T22810] EXT4-fs (loop4): bad geometry: block count 196864 exceeds size of device (256 blocks)
21:37:11 executing program 2:

21:37:11 executing program 1:

21:37:11 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000104000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:11 executing program 5:

21:37:11 executing program 3:

21:37:11 executing program 5:

21:37:11 executing program 1:

21:37:11 executing program 3:

21:37:11 executing program 2:

21:37:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  569.422862][T22831] EXT4-fs (loop4): bad geometry: block count 262400 exceeds size of device (256 blocks)
21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 2:

21:37:11 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000105000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:11 executing program 3:

21:37:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 3:

21:37:11 executing program 2:

21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  569.666114][T22860] EXT4-fs (loop4): bad geometry: block count 327936 exceeds size of device (256 blocks)
21:37:11 executing program 3:

21:37:11 executing program 2:

21:37:11 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000106000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

21:37:11 executing program 3:

21:37:11 executing program 2:

21:37:11 executing program 1:

21:37:11 executing program 5:

21:37:11 executing program 3:

21:37:11 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  569.885949][T22883] EXT4-fs (loop4): bad geometry: block count 393472 exceeds size of device (256 blocks)
21:37:12 executing program 2:

21:37:12 executing program 5:

21:37:12 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000107000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:12 executing program 1:

21:37:12 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:37:12 executing program 3:

21:37:12 executing program 2:

21:37:12 executing program 5:

21:37:12 executing program 1:

[  570.066786][T22899] EXT4-fs (loop4): bad geometry: block count 459008 exceeds size of device (256 blocks)
21:37:12 executing program 5:

21:37:12 executing program 3:

21:37:12 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:37:12 executing program 1:

21:37:12 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000108000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:12 executing program 2:

21:37:12 executing program 5:

21:37:12 executing program 3:

21:37:12 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:37:12 executing program 1:

21:37:12 executing program 2:

[  570.262604][T22918] EXT4-fs (loop4): bad geometry: block count 524544 exceeds size of device (256 blocks)
21:37:12 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000109000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:12 executing program 3:

21:37:12 executing program 2:

21:37:12 executing program 1:

21:37:12 executing program 2:

21:37:12 executing program 5:

21:37:12 executing program 1:

21:37:12 executing program 5:

21:37:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:12 executing program 1:

21:37:12 executing program 3:

21:37:12 executing program 2:

[  570.459783][T22937] EXT4-fs (loop4): bad geometry: block count 590080 exceeds size of device (256 blocks)
21:37:12 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000010a000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:12 executing program 5:

21:37:12 executing program 1:

21:37:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:12 executing program 3:

21:37:12 executing program 2:

21:37:12 executing program 5:

21:37:12 executing program 1:

21:37:12 executing program 2:

21:37:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  570.615960][T22953] EXT4-fs (loop4): bad geometry: block count 655616 exceeds size of device (256 blocks)
21:37:12 executing program 3:

21:37:12 executing program 5:

21:37:12 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000010b000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:12 executing program 1:

21:37:12 executing program 2:

21:37:12 executing program 5:

21:37:12 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:37:12 executing program 3:

21:37:12 executing program 2:

21:37:12 executing program 1:

21:37:12 executing program 5:

21:37:12 executing program 3:

[  570.828812][T22973] EXT4-fs (loop4): bad geometry: block count 721152 exceeds size of device (256 blocks)
21:37:13 executing program 2:

21:37:13 executing program 1:

21:37:13 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000010c000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:13 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:37:13 executing program 5:

21:37:13 executing program 3:

21:37:13 executing program 5:

21:37:13 executing program 2:

21:37:13 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup(r2)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:37:13 executing program 5:

[  571.018501][T22991] EXT4-fs (loop4): bad geometry: block count 786688 exceeds size of device (256 blocks)
21:37:13 executing program 1:

21:37:13 executing program 3:

21:37:13 executing program 2:

21:37:13 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000010d000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:13 executing program 1:

21:37:13 executing program 5:

21:37:13 executing program 3:

21:37:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:13 executing program 2:

21:37:13 executing program 2:

[  571.223404][T23009] EXT4-fs (loop4): bad geometry: block count 852224 exceeds size of device (256 blocks)
21:37:13 executing program 1:

21:37:13 executing program 5:

21:37:13 executing program 3:

21:37:13 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000010e000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:13 executing program 2:

21:37:13 executing program 5:

21:37:13 executing program 5:

21:37:13 executing program 1:

21:37:13 executing program 3:

[  571.406116][T23030] EXT4-fs (loop4): bad geometry: block count 917760 exceeds size of device (256 blocks)
21:37:13 executing program 2:

21:37:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:13 executing program 1:

21:37:13 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000010f000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:13 executing program 5:

21:37:13 executing program 3:

21:37:13 executing program 1:

21:37:13 executing program 2:

21:37:13 executing program 5:

21:37:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:13 executing program 2:

21:37:13 executing program 1:

21:37:13 executing program 3:

[  571.639893][T23055] EXT4-fs (loop4): bad geometry: block count 983296 exceeds size of device (256 blocks)
21:37:13 executing program 3:

21:37:13 executing program 1:

21:37:13 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000110000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:13 executing program 5:

21:37:13 executing program 2:

21:37:13 executing program 3:

21:37:13 executing program 1:

21:37:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:13 executing program 2:

21:37:13 executing program 5:

21:37:13 executing program 3:

21:37:13 executing program 1:

[  571.867401][T23076] EXT4-fs (loop4): bad geometry: block count 1048832 exceeds size of device (256 blocks)
21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000111000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:14 executing program 2:

21:37:14 executing program 5:

21:37:14 executing program 3:

21:37:14 executing program 1:

21:37:14 executing program 2:

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 5:

21:37:14 executing program 3:

[  572.044334][T23096] EXT4-fs (loop4): bad geometry: block count 1114368 exceeds size of device (256 blocks)
21:37:14 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000112000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:14 executing program 1:

21:37:14 executing program 3:

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 2:

21:37:14 executing program 1:

[  572.168967][T23114] EXT4-fs (loop4): bad geometry: block count 1179904 exceeds size of device (256 blocks)
21:37:14 executing program 3:

21:37:14 executing program 2:

21:37:14 executing program 5:

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 2:

21:37:14 executing program 3:

21:37:14 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000114000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:14 executing program 5:

21:37:14 executing program 1:

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 2:

21:37:14 executing program 1:

21:37:14 executing program 3:

21:37:14 executing program 1:

21:37:14 executing program 5:

[  572.438096][T23142] EXT4-fs (loop4): bad geometry: block count 1310976 exceeds size of device (256 blocks)
21:37:14 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000116000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 2:

21:37:14 executing program 5:

21:37:14 executing program 1:

21:37:14 executing program 3:

21:37:14 executing program 2:

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 5:

21:37:14 executing program 1:

[  572.641987][T23163] EXT4-fs (loop4): bad geometry: block count 1442048 exceeds size of device (256 blocks)
21:37:14 executing program 3:

21:37:14 executing program 1:

21:37:14 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000125000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:14 executing program 2:

21:37:14 executing program 5:

21:37:14 executing program 3:

21:37:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:14 executing program 1:

21:37:14 executing program 2:

21:37:14 executing program 5:

[  572.858583][T23189] EXT4-fs (loop4): bad geometry: block count 2425088 exceeds size of device (256 blocks)
21:37:15 executing program 2:

21:37:15 executing program 3:

21:37:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:15 executing program 1:

21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000012e000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 5:

21:37:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:15 executing program 2:

21:37:15 executing program 3:

21:37:15 executing program 5:

21:37:15 executing program 1:

21:37:15 executing program 2:

21:37:15 executing program 1:

[  573.088610][T23212] EXT4-fs (loop4): bad geometry: block count 3014912 exceeds size of device (256 blocks)
21:37:15 executing program 5:

21:37:15 executing program 2:

21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000132000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 3:

21:37:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:15 executing program 5:

21:37:15 executing program 1:

21:37:15 executing program 3:

21:37:15 executing program 2:

21:37:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  573.296655][T23237] EXT4-fs (loop4): bad geometry: block count 3277056 exceeds size of device (256 blocks)
21:37:15 executing program 5:

21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000148000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 2:

21:37:15 executing program 1:

21:37:15 executing program 3:

21:37:15 executing program 5:

21:37:15 executing program 2:

21:37:15 executing program 5:

[  573.466354][T23254] EXT4-fs (loop4): bad geometry: block count 4718848 exceeds size of device (256 blocks)
21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000014c000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000015c000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 2:

21:37:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:15 executing program 1:

21:37:15 executing program 3:

21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000160000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 2:

21:37:15 executing program 5:

21:37:15 executing program 1:

21:37:15 executing program 1:

21:37:15 executing program 2:

21:37:15 executing program 3:

[  573.715143][T23275] EXT4-fs (loop4): bad geometry: block count 6291712 exceeds size of device (256 blocks)
21:37:15 executing program 5:

21:37:15 executing program 1:

21:37:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240), 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:15 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000168000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:15 executing program 3:

21:37:15 executing program 2:

21:37:15 executing program 5:

21:37:15 executing program 1:

21:37:16 executing program 2:

21:37:16 executing program 3:

21:37:16 executing program 5:

[  573.952875][T23298] EXT4-fs (loop4): bad geometry: block count 6816000 exceeds size of device (256 blocks)
21:37:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240), 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:16 executing program 1:

21:37:16 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000016c000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:16 executing program 2:

21:37:16 executing program 3:

21:37:16 executing program 5:

21:37:16 executing program 1:

21:37:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240), 0x0)
dup(0xffffffffffffffff)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:16 executing program 5:

21:37:16 executing program 3:

[  574.116710][T23314] EXT4-fs (loop4): bad geometry: block count 7078144 exceeds size of device (256 blocks)
21:37:16 executing program 2:

21:37:16 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000174000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:16 executing program 1:

21:37:16 executing program 5:

21:37:16 executing program 3:

21:37:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:16 executing program 2:

21:37:16 executing program 1:

21:37:16 executing program 3:

[  574.309753][T23335] EXT4-fs (loop4): bad geometry: block count 7602432 exceeds size of device (256 blocks)
21:37:16 executing program 5:

21:37:16 executing program 2:

21:37:16 executing program 1:

21:37:16 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000017a000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:16 executing program 5:

21:37:16 executing program 2:

21:37:16 executing program 3:

21:37:16 executing program 1:

21:37:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:16 executing program 1:

[  574.529258][T23361] EXT4-fs (loop4): bad geometry: block count 7995648 exceeds size of device (256 blocks)
21:37:16 executing program 5:

21:37:16 executing program 2:

21:37:16 executing program 3:

21:37:16 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000182000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:16 executing program 1:

21:37:16 executing program 5:

21:37:16 executing program 2:

21:37:16 executing program 3:

21:37:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:16 executing program 2:

21:37:16 executing program 1:

21:37:16 executing program 5:

[  574.720928][T23379] EXT4-fs (loop4): bad geometry: block count 8519936 exceeds size of device (256 blocks)
21:37:16 executing program 3:

21:37:16 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000183000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:16 executing program 1:

[  574.818822][T23388] kvm [23387]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
21:37:16 executing program 2:

21:37:16 executing program 3:

21:37:16 executing program 5:

21:37:17 executing program 1:

21:37:17 executing program 5:

[  574.896699][T23398] EXT4-fs (loop4): bad geometry: block count 8585472 exceeds size of device (256 blocks)
21:37:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:17 executing program 5:

21:37:17 executing program 1:

21:37:17 executing program 2:

21:37:17 executing program 3:

21:37:17 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000184000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:17 executing program 1:

21:37:17 executing program 5:

21:37:17 executing program 3:

21:37:17 executing program 2:

21:37:17 executing program 5:

21:37:17 executing program 1:

[  575.105384][T23414] kvm [23411]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[  575.139636][T23421] EXT4-fs (loop4): bad geometry: block count 8651008 exceeds size of device (256 blocks)
21:37:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:17 executing program 3:

21:37:17 executing program 2:

21:37:17 executing program 5:

21:37:17 executing program 1:

21:37:17 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000185000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:17 executing program 3:

21:37:17 executing program 1:

21:37:17 executing program 5:

21:37:17 executing program 2:

21:37:17 executing program 1:
r0 = socket$kcm(0x29, 0x5, 0x0)
listen(r0, 0x0)

[  575.378440][T23436] kvm [23435]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[  575.392916][T23444] EXT4-fs (loop4): bad geometry: block count 8716544 exceeds size of device (256 blocks)
21:37:17 executing program 3:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

21:37:17 executing program 1:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x280000001, 0x0)
r2 = dup2(r0, r0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180))

21:37:17 executing program 5:
socket$kcm(0x29, 0x912e7fca4796a939, 0x0)

21:37:17 executing program 2:

21:37:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:17 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000186000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:17 executing program 3:

21:37:17 executing program 2:
r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x280000001, 0x80a00)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0)

21:37:17 executing program 3:
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
syz_io_uring_setup(0x7079, &(0x7f0000002980), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x16c8, &(0x7f0000002a40)={0x0, 0x0, 0x2, 0x0, 0x162}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002ac0), &(0x7f0000002b00))

21:37:17 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001540)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63525}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}]}, 0x38}}, 0x0)

21:37:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  575.589620][T23462] EXT4-fs (loop4): bad geometry: block count 8782080 exceeds size of device (256 blocks)
21:37:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:17 executing program 2:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
connect$x25(r0, 0x0, 0x0)

21:37:17 executing program 1:
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040))
waitid(0x1, 0x0, &(0x7f0000000780), 0x2, &(0x7f0000000800))

21:37:17 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="2000000000019d000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:17 executing program 1:
r0 = syz_io_uring_setup(0x4b17, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))
syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl(r0, 0xc1ef, 0x0)

21:37:17 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f00000001c0)={0x1}, 0x8)

21:37:17 executing program 3:
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
syz_io_uring_setup(0x7079, &(0x7f0000002980), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x16c8, &(0x7f0000002a40)={0x0, 0x0, 0x2, 0x0, 0x162}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002ac0), &(0x7f0000002b00))

21:37:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  575.806790][T23497] device wireguard0 entered promiscuous mode
21:37:17 executing program 5:
socketpair(0x23, 0x0, 0x3, &(0x7f0000000000))

[  575.850303][T23513] EXT4-fs (loop4): bad geometry: block count 10289408 exceeds size of device (256 blocks)
[  575.869246][T23518] device wireguard1 entered promiscuous mode
21:37:18 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)

21:37:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

21:37:18 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001a0000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:18 executing program 3:
syz_io_uring_setup(0x7079, &(0x7f0000002980)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x16c8, &(0x7f0000002a40)={0x0, 0x0, 0x2, 0x0, 0x162}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002ac0), &(0x7f0000002b00))

21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:18 executing program 5:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x200, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0)

21:37:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0)

21:37:18 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80), 0x8, 0x10, 0x0}, 0x78)

[  576.049440][T23556] EXT4-fs (loop4): bad geometry: block count 10486016 exceeds size of device (256 blocks)
21:37:18 executing program 2:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)

21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:18 executing program 2:
setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0)

21:37:18 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001c4000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

21:37:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

21:37:18 executing program 5:
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)

21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:18 executing program 2:
syz_io_uring_setup(0x7079, &(0x7f0000002980), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x16c8, &(0x7f0000002a40)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002ac0), &(0x7f0000002b00))

21:37:18 executing program 3:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)

21:37:18 executing program 1:
pipe2(&(0x7f00000006c0), 0x0)
listen(0xffffffffffffffff, 0x0)

21:37:18 executing program 5:
io_uring_setup(0x586c, &(0x7f0000000000)={0x0, 0x0, 0x20})
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl(r0, 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x1090c0)
syz_open_dev$ndb(&(0x7f0000000580)='/dev/nbd#\x00', 0x0, 0x2480)

[  576.337582][T23600] EXT4-fs (loop4): bad geometry: block count 12845312 exceeds size of device (256 blocks)
21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:18 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

21:37:18 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001c5000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:18 executing program 3:
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)

21:37:18 executing program 2:
syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x1090c0)

[  576.511530][T23634] Unknown ioctl -1067952547
21:37:18 executing program 5:
syz_io_uring_setup(0x2b86, &(0x7f0000000040), &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000d9e000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

21:37:18 executing program 1:
io_uring_setup(0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')

21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  576.559087][T23638] EXT4-fs (loop4): bad geometry: block count 12910848 exceeds size of device (256 blocks)
21:37:18 executing program 3:
syz_io_uring_setup(0x4b17, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))

21:37:18 executing program 2:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0)

21:37:18 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl(r0, 0x8d, 0x0)

21:37:18 executing program 5:
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040))
waitid(0x0, 0x0, &(0x7f0000000780), 0x2, &(0x7f0000000800))

21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:18 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001c6000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:18 executing program 2:
r0 = syz_io_uring_setup(0x4b17, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))
syz_open_dev$vcsa(0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl(r0, 0xc1ef, &(0x7f0000000680)="4071182df0ebf801556a9ddba438e27c60")

21:37:18 executing program 3:
io_uring_setup(0x0, &(0x7f0000000000))
getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))

21:37:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

[  576.755722][T23675] EXT4-fs (loop4): bad geometry: block count 12976384 exceeds size of device (256 blocks)
21:37:18 executing program 1:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x101000, 0x0)

21:37:18 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001c7000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:18 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x18}}], 0x2, 0x0)

21:37:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

21:37:18 executing program 5:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
connect$x25(r0, &(0x7f00000000c0)={0x9, @remote={[], 0x0}}, 0x12)

21:37:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  576.920527][T23709] EXT4-fs (loop4): bad geometry: block count 13041920 exceeds size of device (256 blocks)
21:37:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)

21:37:19 executing program 5:
socketpair(0x1e, 0x0, 0x2, &(0x7f0000000340))

21:37:19 executing program 2:

21:37:19 executing program 3:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000002180)='security.evm\x00', 0x0, 0x0, 0x0)

21:37:19 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001ca000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:19 executing program 1:
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0)

21:37:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:19 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xdb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})

21:37:19 executing program 5:
syz_open_dev$vcsu(&(0x7f0000004bc0)='/dev/vcsu#\x00', 0x6, 0x0)

21:37:19 executing program 3:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
socketpair(0x1e, 0x0, 0x2, &(0x7f0000000340))

[  577.158097][T23738] EXT4-fs (loop4): bad geometry: block count 13238528 exceeds size of device (256 blocks)
21:37:19 executing program 1:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0), 0x10}, 0x78)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

21:37:19 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001cb000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

21:37:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:19 executing program 3:
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x280000001, 0x80a00)

21:37:19 executing program 1:
syz_io_uring_setup(0x4b17, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))
syz_open_dev$vcsa(0x0, 0x0, 0x80)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x80)
ioctl(0xffffffffffffffff, 0xc1ef, &(0x7f0000000680)="4071182df0ebf801556a9ddba4")

21:37:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

21:37:19 executing program 3:
syz_io_uring_setup(0x533a, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

[  577.328224][T23766] EXT4-fs (loop4): bad geometry: block count 13304064 exceeds size of device (256 blocks)
21:37:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  577.453393][T13108] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  577.743446][T13108] usb 3-1: Using ep0 maxpacket: 16
[  577.885378][T13108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.913126][T13108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.953456][T13108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  578.000307][T13108] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  578.046661][T13108] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  578.254997][T13108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  578.267448][T13108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.296766][T13108] usb 3-1: Product: syz
[  578.315947][T13108] usb 3-1: Manufacturer: syz
[  578.331588][T13108] usb 3-1: SerialNumber: syz
[  578.613354][T13108] cdc_ncm 3-1:1.0: bind() failure
[  578.621178][T13108] cdc_ncm 3-1:1.1: bind() failure
[  578.665951][T13108] usb 3-1: USB disconnect, device number 23
[  579.363299][T13108] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  579.624578][T13108] usb 3-1: Using ep0 maxpacket: 16
[  579.753968][T13108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.766743][T13108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.792573][T13108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  579.821120][T13108] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  579.834412][T13108] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  580.013553][T13108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  580.022630][T13108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.037911][T13108] usb 3-1: Product: syz
[  580.046312][T13108] usb 3-1: Manufacturer: syz
[  580.055302][T13108] usb 3-1: SerialNumber: syz
21:37:22 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept(r0, 0x0, 0x0)

21:37:22 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001cc000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:22 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

21:37:22 executing program 5:
getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))

21:37:22 executing program 1:
read$hiddev(0xffffffffffffffff, 0x0, 0x0)

21:37:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  580.213311][T13108] cdc_ncm 3-1:1.0: bind() failure
21:37:22 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001cd000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:22 executing program 1:
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4100)

21:37:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000702"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)

21:37:22 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup2(r0, r1)

[  580.240888][T13108] cdc_ncm 3-1:1.1: bind() failure
[  580.241827][T23820] EXT4-fs (loop4): bad geometry: block count 13369600 exceeds size of device (256 blocks)
21:37:22 executing program 5:
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000480))

[  580.363372][T13108] usb 3-1: USB disconnect, device number 24
21:37:22 executing program 1:
pipe2(&(0x7f0000000700)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup2(r1, r0)

21:37:22 executing program 2:
syz_io_uring_setup(0x4b17, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))
ioctl(0xffffffffffffffff, 0x0, 0x0)

21:37:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f00000003c0)=ANY=[]})

[  580.470599][T23852] EXT4-fs (loop4): bad geometry: block count 13435136 exceeds size of device (256 blocks)
21:37:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:22 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000900)=@raw=[@map], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18dc1}, 0x78)

21:37:22 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001ce000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:22 executing program 5:
openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x20000, 0x0)

21:37:22 executing program 2:
r0 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040))

[  580.648470][T23892] EXT4-fs (loop4): bad geometry: block count 13500672 exceeds size of device (256 blocks)
21:37:22 executing program 1:
r0 = syz_io_uring_setup(0x4b17, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))
syz_open_dev$vcsa(0x0, 0x81, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0)
ioctl(r0, 0xc1ef, 0x0)

21:37:22 executing program 3:
syz_io_uring_setup(0x2b86, &(0x7f0000000040), &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000d9e000/0x3000)=nil, 0x0, 0x0)

21:37:22 executing program 5:
accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

21:37:22 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_gfeatures})

21:37:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:22 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001cf000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$RTC_VL_CLR(r1, 0x7014)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@initr0]}, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000900)=@raw=[@alu], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x6a, &(0x7f00000009c0)=""/106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

21:37:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  580.878563][T23939] EXT4-fs (loop4): bad geometry: block count 13566208 exceeds size of device (256 blocks)
21:37:23 executing program 1:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0})

21:37:23 executing program 5:
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x204000)

21:37:23 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001d8000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:23 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x24a300, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)

21:37:23 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[])
sched_setattr(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000200)="26000000130047f10701c1b00ef90000078f7ed79f0b5ef239077f57a088b4d1", 0x20)
recvmsg(0xffffffffffffffff, &(0x7f0000f95fd7)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fdatasync(r1)

21:37:23 executing program 5:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x0)

21:37:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  581.048290][T23977] EXT4-fs (loop4): bad geometry: block count 14156032 exceeds size of device (256 blocks)
21:37:23 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0)

21:37:23 executing program 2:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)

21:37:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000900)=@raw=[@map={0x18, 0x5}, @call, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000980)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1a, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x2, 0xd}, 0x10}, 0x78)

21:37:23 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x13c, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12a, 0x2, 0x1, 0x0, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x7fff, 0x20}, {0x6, 0x24, 0x1a, 0x400, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xbd, 0x24, 0x13, 0x7f, "2bd6128d880a0b36778e5da8df1fa22f388fa0f2027df630ec7842aafddac9727417e13ae363e712bbc84bdecef905a3fbdb5b432055a0fa98d6d936b8d648ed8a40873c599b82a2b5b956717acd2f3deeadfa13350d51a44131fcd485d93f21e9e0b5926a36e50eee4765b59680382770b62185421b439687286cbbe7248e277f3942b5cf1e2be4e74d31f98f436998b07d98cd076eb4aff612eabd8f1054ef0b611e43b541566e348eaf59dbd815b7eb1b9451151a43dfab"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0x0, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1a7, 0x2, 0x20, 0xdb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x3, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xf8, 0x0, 0xff, 0xc3}, 0xbd, &(0x7f00000003c0)={0x5, 0xf, 0xbd, 0x3, [@generic={0x99, 0x10, 0xb, "e115ba33edd340862475573fe74b4ea549362bcb68776677df72fdceec390a6956965ad49a9f09ddfd126abf939882ea79148d883737480fbde6189ea4c4c3d63ee6216ae8515c47aeb097f3c75c8b1a2e4a74fa64fec7a97a10aa11a105956ef15ccfa5d2bd8eaf92c434035cb45238021a235d1f786849f8974b6294f6251de7106ff32037387401496d83b330f2320216bdb966ff"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x3, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x0, 0xf, 0xef4, [0xff30, 0xc060, 0xf]}]}, 0x5, [{0x1e, &(0x7f0000000480)=@string={0x1e, 0x3, "5e4d13453f1235188abf4ee4ddd854bc6cd319d8eea17c4f8456ab74"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "dd5c9dd975982eeb3972b070cd88a039ff2e56e589c131347a4d83f8ba5c7d61ef5b9a7f2d847dddc56bfae8e5ea8c3b6dfe28ed1a52220afd0d3e309cc258ffd12153d40e19d08cf7ecf74cc980d8409fce2d5053aa513abac705"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x93, &(0x7f0000000580)=@string={0x93, 0x3, "970d8c2c1fafc988c0c7f2e68efee1dc968bb43fcc3309486a2e3e98d8aab854fe8fccc198e52da744c0da740e0381e370e521c482ee3145d84a8c26c40189df00ef3ce2a82b3293579ff40823556e0a84b401458b7c61d76e67b6b9f1b381a4867ab67aa61e04948c25d8f2c87c8ecf6b9f9bed33f5e5ce42ac9f5abff9c60a527129bc4003257f1f74b4a6c2540eefd7"}}, {0x46, &(0x7f0000000640)=@string={0x46, 0x3, "edbb9041b11c9e9200e2ef3b4dd13a19b065ce66428ad14690a50e53de15e8103f5320ab5cb5316b6a46dc50aa105d2d004a5de8ed02dd06eeb4cea680b51bd3becdc291"}}]})

21:37:23 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001d9000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:23 executing program 5:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200, 0x0)

21:37:23 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xf0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1}}}}}}]}}, 0x0)

21:37:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  581.287253][   T34] audit: type=1800 audit(1606685843.353:134): pid=23993 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="loop3" ino=60 res=0 errno=0
[  581.319957][T24009] EXT4-fs (loop4): bad geometry: block count 14221568 exceeds size of device (256 blocks)
21:37:23 executing program 3:
syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x200)

21:37:23 executing program 5:
syz_io_uring_setup(0x45e6, &(0x7f0000003a00)={0x0, 0x4cf2, 0x3f, 0x0, 0x3ca}, &(0x7f0000e4a000/0x1000)=nil, &(0x7f0000d42000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))

21:37:23 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000000001fc000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:23 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000080))

21:37:23 executing program 5:
io_uring_setup(0x586c, &(0x7f0000000000)={0x0, 0x0, 0x20})
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl(r0, 0x8d, &(0x7f00000002c0)="cb9e8dec3444e634e8b07ef2266d6032e198ec59d7796dc9bba061f830fc9b0b170c7a8dbc")
syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x7, 0x1090c0)
syz_open_dev$ndb(&(0x7f0000000580)='/dev/nbd#\x00', 0x0, 0x2480)

21:37:23 executing program 3:
pipe2(&(0x7f0000000700)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

[  581.507074][T24032] EXT4-fs (loop4): bad geometry: block count 16515328 exceeds size of device (256 blocks)
[  581.603807][T13170] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  581.643222][    T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  581.843180][T13170] usb 2-1: Using ep0 maxpacket: 16
[  581.883554][    T7] usb 3-1: Using ep0 maxpacket: 16
[  581.963574][T13170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  581.983713][T13170] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  582.011365][T13170] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  582.021929][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.068044][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.101519][    T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  582.142253][    T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  582.153609][    T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  582.186775][    T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  582.253781][T13170] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  582.271155][T13170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.288005][T13170] usb 2-1: Product: ఉ
[  582.303987][T13170] usb 2-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓ᤎ賐䳷胉䃘캟倭꩓㩑잺
[  582.321529][T13170] usb 2-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방̀缥琟ꚴ哂
[  582.373593][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  582.382668][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.395188][    T7] usb 3-1: Product: syz
[  582.399912][    T7] usb 3-1: Manufacturer: syz
[  582.406359][    T7] usb 3-1: SerialNumber: syz
[  582.673144][T13170] cdc_ncm 2-1:1.0: bind() failure
[  582.680649][T13170] cdc_ncm 2-1:1.1: bind() failure
[  582.698304][T13170] usb 2-1: USB disconnect, device number 7
[  582.713174][    T7] cdc_ncm 3-1:1.0: bind() failure
[  582.721622][    T7] cdc_ncm 3-1:1.1: bind() failure
[  582.743784][    T7] usb 3-1: USB disconnect, device number 25
[  583.403142][    T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  583.433089][T13172] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  583.643124][    T7] usb 2-1: Using ep0 maxpacket: 16
[  583.673074][T13172] usb 3-1: Using ep0 maxpacket: 16
[  583.763378][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  583.774609][    T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  583.784605][    T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  583.795781][T13172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.806797][T13172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.816761][T13172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  583.826919][T13172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  583.837003][T13172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  583.847143][T13172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  583.963146][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  583.972310][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.987292][    T7] usb 2-1: Product: ఉ
[  583.991440][    T7] usb 2-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓ᤎ賐䳷胉䃘캟倭꩓㩑잺
[  584.013167][    T7] usb 2-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방̀缥琟ꚴ哂
[  584.035591][T13172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  584.046726][T13172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.054758][T13172] usb 3-1: Product: syz
[  584.061422][T13172] usb 3-1: Manufacturer: syz
[  584.067507][T13172] usb 3-1: SerialNumber: syz
21:37:26 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000104020c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:26 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x1f9, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x2, 0x1, 0x7, 0xf0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x7fff, 0x20}, {0x6, 0x24, 0x1a, 0x400, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xbd, 0x24, 0x13, 0x7f, "2bd6128d880a0b36778e5da8df1fa22f388fa0f2027df630ec7842aafddac9727417e13ae363e712bbc84bdecef905a3fbdb5b432055a0fa98d6d936b8d648ed8a40873c599b82a2b5b956717acd2f3deeadfa13350d51a44131fcd485d93f21e9e0b5926a36e50eee4765b59680382770b62185421b439687286cbbe7248e277f3942b5cf1e2be4e74d31f98f436998b07d98cd076eb4aff612eabd8f1054ef0b611e43b541566e348eaf59dbd815b7eb1b9451151a43dfab"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0x71, 0x5, 0x0, 0x81}, @mdlm_detail={0xbd, 0x24, 0x13, 0x81, "ffd851c92b240f9c0a5cce8f118b11ea65f525fa029b5ffeff68461a372dcb9e5f2478e7765671a1e2cb997fa5cff529b8128bc1476bde3901a724a9fec922521ca1e03f69ba2e42a1822301514e5d9ad25aaa5afe6ebeebf156895b6db1336ee23f7ebd8e754dde0674cc320c0b72fc305d0e936e4c3479960602c8b918cda7bbae1afc976f13d7844d9a31f28ab0c83f2c462a8e49cc23128dd69f2ec1b3534fa3df62611c7c5fcb614d1531ee27c2bc3eb0dff1406cc776"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1a7, 0x2, 0x20, 0xdb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x3, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xf8, 0x0, 0xff, 0xc3}, 0xbd, &(0x7f00000003c0)={0x5, 0xf, 0xbd, 0x3, [@generic={0x99, 0x10, 0xb, "e115ba33edd340862475573fe74b4ea549362bcb68776677df72fdceec390a6956965ad49a9f09ddfd126abf939882ea79148d883737480fbde6189ea4c4c3d63ee6216ae8515c47aeb097f3c75c8b1a2e4a74fa64fec7a97a10aa11a105956ef15ccfa5d2bd8eaf92c434035cb45238021a235d1f786849f8974b6294f6251de7106ff32037387401496d83b330f2320216bdb966ff"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x3, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0xf, 0xef4, [0xff30, 0xc060, 0xf]}]}, 0x5, [{0x1e, &(0x7f0000000480)=@string={0x1e, 0x3, "5e4d13453f1235188abf4ee4ddd854bc6cd319d8eea17c4f8456ab74"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "dd5c9dd975982eeb3972b070cd88a039ff2e56e589c131347a4d83f8ba5c7d61ef5b9a7f2d847dddc56bfae8e5ea8c3b6dfe28ed1a52220afd0d3e309cc258ffd12153d40e19d08cf7ecf74cc980d8409fce2d5053aa513abac705"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x95, &(0x7f0000000580)=@string={0x95, 0x3, "970d8c2c1fafc988c0c7f2e68efee1dc968bb43fcc3309486a2e3e98d8aab854fe8fccc198e52da744c0da740e0381e370e521c482ee3145d84a8c26c40189df00ef3ce2a82b3293579ff40823556e0a84b401458b7c61d76e67b6b9f1b381a4867ab67aa61e04948c25d8f2c87c8ecf6b9f9bed33f5e5ce42ac9f5abff9c60a527129bc4003257f1f74b4a6c2540eefd7d5cf"}}, {0x46, &(0x7f0000000640)=@string={0x46, 0x3, "edbb9041b11c9e9200e2ef3b4dd13a19b065ce66428ad14690a50e53de15e8103f5320ab5cb5316b6a46dc50aa105d2d004a5de8ed02dd06eeb4cea680b51bd3becdc291"}}]})

21:37:26 executing program 1:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
writev(r0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000300)="85", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)

21:37:26 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='GPL\x00', 0x0, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

21:37:26 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0)

[  584.283128][    T7] cdc_ncm 2-1:1.0: bind() failure
[  584.290354][T24108] EXT4-fs (loop4): bad geometry: block count 33816832 exceeds size of device (256 blocks)
[  584.316881][    T7] cdc_ncm 2-1:1.1: bind() failure
21:37:26 executing program 3:
syz_io_uring_setup(0x45e6, &(0x7f0000003a00)={0x0, 0x0, 0x3f}, &(0x7f0000e4a000/0x1000)=nil, &(0x7f0000d42000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))

21:37:26 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x1e2, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d0, 0x2, 0x1, 0x0, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x7fff, 0x20}, {0x6, 0x24, 0x1a, 0x400, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xbd, 0x24, 0x13, 0x7f, "2bd6128d880a0b36778e5da8df1fa22f388fa0f2027df630ec7842aafddac9727417e13ae363e712bbc84bdecef905a3fbdb5b432055a0fa98d6d936b8d648ed8a40873c599b82a2b5b956717acd2f3deeadfa13350d51a44131fcd485d93f21e9e0b5926a36e50eee4765b59680382770b62185421b439687286cbbe7248e277f3942b5cf1e2be4e74d31f98f436998b07d98cd076eb4aff612eabd8f1054ef0b611e43b541566e348eaf59dbd815b7eb1b9451151a43dfab"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0x71, 0x5, 0x0, 0x81}, @mdlm_detail={0xa6, 0x24, 0x13, 0x0, "ffd851c92b240f9c0a5cce8f118b11ea65f525fa029b5ffeff68461a372dcb9e5f2478e7765671a1e2cb997fa5cff529b8128bc1476bde3901a724a9fec922521ca1e03f69ba2e42a1822301514e5d9ad25aaa5afe6ebeebf156895b6db1336ee23f7ebd8e754dde0674cc320c0b72fc305d0e936e4c3479960602c8b918cda7bbae1afc976f13d7844d9a31f28ab0c83f2c462a8e49cc23128dd69f2ec1b3534fa3"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1a7, 0x0, 0x20, 0xdb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x3, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xf8, 0x0, 0xff, 0xc3}, 0xb9, &(0x7f00000003c0)={0x5, 0xf, 0xb9, 0x3, [@generic={0x99, 0x10, 0xb, "e115ba33edd340862475573fe74b4ea549362bcb68776677df72fdceec390a6956965ad49a9f09ddfd126abf939882ea79148d883737480fbde6189ea4c4c3d63ee6216ae8515c47aeb097f3c75c8b1a2e4a74fa64fec7a97a10aa11a105956ef15ccfa5d2bd8eaf92c434035cb45238021a235d1f786849f8974b6294f6251de7106ff32037387401496d83b330f2320216bdb966ff"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0xf, 0xef4, [0xff30, 0xf]}]}, 0x5, [{0x2, &(0x7f0000000480)=@string={0x2}}, {0x47, &(0x7f00000004c0)=@string={0x47, 0x3, "dd5c9dd975982eeb3972b070cd88a039ff2e56e589c131347a4d83f8ba5c7d61ef5b9a7f2d847dddc56bfae8e5ea8c3b6dfe28ed1a52220afd0d3e309cc258ffd12153d40e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x87, &(0x7f0000000580)=@string={0x87, 0x3, "970d8c2c1fafc988c0c7f2e68efee1dc968bb43fcc3309486a2e3e98d8aab854fe8fccc198e52da744c0da740e0381e370e521c482ee3145d84a8c26c40189df00ef3ce2a82b3293579ff40823556e0a84b401458b7c61d76e67b6b9f1b381a4867ab67aa61e04948c25d8f2c87c8ecf6b9f9bed33f5e5ce42ac9f5abff9c60a527129bc40"}}, {0x46, &(0x7f0000000640)=@string={0x46, 0x3, "edbb9041b11c9e9200e2ef3b4dd13a19b065ce66428ad14690a50e53de15e8103f5320ab5cb5316b6a46dc50aa105d2d004a5de8ed02dd06eeb4cea680b51bd3becdc291"}}]})

[  584.354438][T13172] cdc_ncm 3-1:1.0: bind() failure
[  584.375640][    T7] usb 2-1: USB disconnect, device number 8
[  584.384590][T13172] cdc_ncm 3-1:1.1: bind() failure
[  584.411710][T13172] usb 3-1: USB disconnect, device number 26
21:37:26 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:26 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0)

21:37:26 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

21:37:26 executing program 2:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)

21:37:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  584.536508][T24148] EXT4-fs (loop4): bad geometry: block count 50331904 exceeds size of device (256 blocks)
[  584.703004][    T5] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  584.803013][    T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  584.953048][    T5] usb 6-1: Using ep0 maxpacket: 16
[  585.043010][    T7] usb 2-1: Using ep0 maxpacket: 16
[  585.073255][    T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  585.084364][    T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  585.094412][    T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  585.163066][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  585.174180][    T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  585.190104][    T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  585.233090][    T7] usb 2-1: language id specifier not provided by device, defaulting to English
[  585.263023][    T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  585.272189][    T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.286090][    T5] usb 6-1: Product: ఉ
[  585.290244][    T5] usb 6-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓ᤎ賐䳷胉䃘캟倭꩓㩑잺
[  585.311811][    T5] usb 6-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방̀缥琟ꚴ哂헗
[  585.373059][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  585.382436][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.399640][    T7] usb 2-1: Product: ఉ
[  585.407006][    T7] usb 2-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓
[  585.423182][    T7] usb 2-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방
[  585.483833][    T7] cdc_ncm 2-1:1.0: bind() failure
[  585.491548][    T7] cdc_ncm 2-1:1.1: bind() failure
[  585.603527][    T5] cdc_ncm 6-1:1.0: bind() failure
[  585.611276][    T5] cdc_ncm 6-1:1.1: bind() failure
[  585.631086][    T5] usb 6-1: USB disconnect, device number 10
[  585.685591][T13172] usb 2-1: USB disconnect, device number 9
[  586.342939][T13172] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  586.472945][T13108] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  586.582941][T13172] usb 6-1: Using ep0 maxpacket: 16
[  586.703389][T13172] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  586.714516][T13172] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  586.727592][T13172] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  586.742927][T13108] usb 2-1: Using ep0 maxpacket: 16
[  586.893408][T13108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  586.893496][T13172] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.904429][T13108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  586.915166][T13172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.937146][T13172] usb 6-1: Product: ఉ
[  586.940886][T13108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  586.941303][T13172] usb 6-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓ᤎ賐䳷胉䃘캟倭꩓㩑잺
[  586.967465][T13172] usb 6-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방̀缥琟ꚴ哂헗
[  586.994927][T13108] usb 2-1: language id specifier not provided by device, defaulting to English
[  587.132912][T13108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  587.142303][T13108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.153650][T13108] usb 2-1: Product: ఉ
[  587.158790][T13108] usb 2-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓
[  587.171820][T13108] usb 2-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방
21:37:29 executing program 5:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)

21:37:29 executing program 3:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))

21:37:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000125030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:29 executing program 2:
syz_open_dev$video(&(0x7f0000000bc0)='/dev/video#\x00', 0x0, 0x220402)

21:37:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  587.233529][T13108] cdc_ncm 2-1:1.0: bind() failure
[  587.241200][T13108] cdc_ncm 2-1:1.1: bind() failure
[  587.283427][T13172] cdc_ncm 6-1:1.0: bind() failure
[  587.290897][T13172] cdc_ncm 6-1:1.1: bind() failure
[  587.340010][T13172] usb 6-1: USB disconnect, device number 11
[  587.345055][T24235] EXT4-fs (loop4): bad geometry: block count 52756736 exceeds size of device (256 blocks)
21:37:29 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x1e2, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d0, 0x2, 0x1, 0x0, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x7fff, 0x20}, {0x6, 0x24, 0x1a, 0x400, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xbd, 0x24, 0x13, 0x7f, "2bd6128d880a0b36778e5da8df1fa22f388fa0f2027df630ec7842aafddac9727417e13ae363e712bbc84bdecef905a3fbdb5b432055a0fa98d6d936b8d648ed8a40873c599b82a2b5b956717acd2f3deeadfa13350d51a44131fcd485d93f21e9e0b5926a36e50eee4765b59680382770b62185421b439687286cbbe7248e277f3942b5cf1e2be4e74d31f98f436998b07d98cd076eb4aff612eabd8f1054ef0b611e43b541566e348eaf59dbd815b7eb1b9451151a43dfab"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0x71, 0x5, 0x0, 0x81}, @mdlm_detail={0xa6, 0x24, 0x13, 0x0, "ffd851c92b240f9c0a5cce8f118b11ea65f525fa029b5ffeff68461a372dcb9e5f2478e7765671a1e2cb997fa5cff529b8128bc1476bde3901a724a9fec922521ca1e03f69ba2e42a1822301514e5d9ad25aaa5afe6ebeebf156895b6db1336ee23f7ebd8e754dde0674cc320c0b72fc305d0e936e4c3479960602c8b918cda7bbae1afc976f13d7844d9a31f28ab0c83f2c462a8e49cc23128dd69f2ec1b3534fa3"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1a7, 0x0, 0x20, 0xdb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x3, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xf8, 0x0, 0xff, 0xc3}, 0xb9, &(0x7f00000003c0)={0x5, 0xf, 0xb9, 0x3, [@generic={0x99, 0x10, 0xb, "e115ba33edd340862475573fe74b4ea549362bcb68776677df72fdceec390a6956965ad49a9f09ddfd126abf939882ea79148d883737480fbde6189ea4c4c3d63ee6216ae8515c47aeb097f3c75c8b1a2e4a74fa64fec7a97a10aa11a105956ef15ccfa5d2bd8eaf92c434035cb45238021a235d1f786849f8974b6294f6251de7106ff32037387401496d83b330f2320216bdb966ff"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0xf, 0xef4, [0xff30, 0xf]}]}, 0x5, [{0x2, &(0x7f0000000480)=@string={0x2}}, {0x47, &(0x7f00000004c0)=@string={0x47, 0x3, "dd5c9dd975982eeb3972b070cd88a039ff2e56e589c131347a4d83f8ba5c7d61ef5b9a7f2d847dddc56bfae8e5ea8c3b6dfe28ed1a52220afd0d3e309cc258ffd12153d40e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x87, &(0x7f0000000580)=@string={0x87, 0x3, "970d8c2c1fafc988c0c7f2e68efee1dc968bb43fcc3309486a2e3e98d8aab854fe8fccc198e52da744c0da740e0381e370e521c482ee3145d84a8c26c40189df00ef3ce2a82b3293579ff40823556e0a84b401458b7c61d76e67b6b9f1b381a4867ab67aa61e04948c25d8f2c87c8ecf6b9f9bed33f5e5ce42ac9f5abff9c60a527129bc40"}}, {0x46, &(0x7f0000000640)=@string={0x46, 0x3, "edbb9041b11c9e9200e2ef3b4dd13a19b065ce66428ad14690a50e53de15e8103f5320ab5cb5316b6a46dc50aa105d2d004a5de8ed02dd06eeb4cea680b51bd3becdc291"}}]})

21:37:29 executing program 2:
syz_io_uring_setup(0x45e6, &(0x7f0000003a00)={0x0, 0x4cf2, 0x3f}, &(0x7f0000e4a000/0x1000)=nil, &(0x7f0000d42000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))

21:37:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[])
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)

21:37:29 executing program 5:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2)

21:37:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  587.408872][T13108] usb 2-1: USB disconnect, device number 10
21:37:29 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000127030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:29 executing program 2:
getresgid(&(0x7f0000000340), &(0x7f0000000380), 0x0)

21:37:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[])
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)

21:37:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_PIE_OFF(r1, 0x7006)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000900)=@raw=[@map], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

21:37:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000ac0)=@framed={{}, [@initr0]}, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x2}, 0x10}, 0x78)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000900)=@raw=[@alu], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$RTC_WIE_ON(r1, 0x700f)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

[  587.536839][   T34] audit: type=1800 audit(1606685849.603:135): pid=24258 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="loop3" ino=61 res=0 errno=0
[  587.563409][T24271] EXT4-fs (loop4): bad geometry: block count 52887808 exceeds size of device (256 blocks)
21:37:29 executing program 5:
socket$kcm(0x29, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x5b31, &(0x7f00000004c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0)

[  587.882861][T13108] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  588.122857][T13108] usb 2-1: Using ep0 maxpacket: 16
[  588.243520][T13108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  588.273857][T13108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  588.313403][T13108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  588.383154][T13108] usb 2-1: language id specifier not provided by device, defaulting to English
[  588.503259][T13108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  588.512338][T13108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.526942][T13108] usb 2-1: Product: ఉ
[  588.531096][T13108] usb 2-1: Manufacturer: 峝页爹炰裍㦠⻿솉㐱䵺岺慽寯羚萭毅㮌﹭刚ਢ෽〾슜ｘ⇑푓
[  588.550261][T13108] usb 2-1: SerialNumber: ඗Ⲍ꼟裉쟀ﺎ讖㾴㏌䠉⹪頾꫘咸迾쇌ꜭ쁄瓚̎쐡䔱䫘⚌DŽ⮨録齗ࣴ唣੮뒄䔁粋흡杮릶돱ꒁ窆窶Ầ鐄▌糈쾎齫컥걂媟樂૆煒방
[  588.613515][T13108] cdc_ncm 2-1:1.0: bind() failure
[  588.621226][T13108] cdc_ncm 2-1:1.1: bind() failure
[  588.830220][    T7] usb 2-1: USB disconnect, device number 11
21:37:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003380)=ANY=[@ANYBLOB='('], 0x28}}, 0x0)

21:37:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000130030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:31 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)

21:37:31 executing program 5:
openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x40000, 0x0)

21:37:31 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[])
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b)

21:37:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:31 executing program 5:
r0 = getpid()
waitid(0x1, r0, &(0x7f0000000780), 0x2, &(0x7f0000000800))

21:37:31 executing program 1:
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
syz_open_dev$ndb(0x0, 0x0, 0x0)

21:37:31 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)

[  589.457857][T24356] EXT4-fs (loop4): bad geometry: block count 53477632 exceeds size of device (256 blocks)
21:37:31 executing program 3:
pipe2(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0)

21:37:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003380)=ANY=[], 0x28}}, 0x0)

21:37:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x1b0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x50], 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}, @common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)

21:37:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000131030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:31 executing program 1:
getresgid(&(0x7f0000000340), 0x0, 0x0)

21:37:31 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)

21:37:31 executing program 5:
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0)

[  589.673935][T24383] x_tables: ip_tables: osf match: only valid for protocol 6
[  589.711202][T24387] EXT4-fs (loop4): bad geometry: block count 53543168 exceeds size of device (256 blocks)
21:37:31 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1a7}}}}}}}]}}, 0x0)

21:37:31 executing program 1:
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0)
socketpair(0x2, 0x80000, 0x0, &(0x7f0000000040))
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)

21:37:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:31 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000132030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:31 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

21:37:31 executing program 5:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0), 0x10}, 0x78)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

21:37:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

21:37:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000900)=@raw=[@map], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$RTC_WIE_ON(r1, 0x700f)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

21:37:32 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000ac0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  589.884675][T24418] EXT4-fs (loop4): bad geometry: block count 53608704 exceeds size of device (256 blocks)
21:37:32 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000133030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:32 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0)
ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, 0x0)

[  590.039768][T24438] EXT4-fs (loop4): bad geometry: block count 53674240 exceeds size of device (256 blocks)
[  590.072767][    T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  590.312729][    T7] usb 3-1: Using ep0 maxpacket: 16
[  590.463095][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  590.474328][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  590.491945][    T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  590.506043][    T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  590.521085][    T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  590.732742][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  590.741780][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.755373][    T7] usb 3-1: Product: syz
[  590.759519][    T7] usb 3-1: Manufacturer: syz
[  590.770167][    T7] usb 3-1: SerialNumber: syz
[  591.062745][    T7] cdc_ncm 3-1:1.0: bind() failure
[  591.070129][    T7] cdc_ncm 3-1:1.1: bind() failure
[  591.092350][    T7] usb 3-1: USB disconnect, device number 27
[  591.782710][T13172] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  592.022671][T13172] usb 3-1: Using ep0 maxpacket: 16
[  592.142983][T13172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.153887][T13172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.166692][T13172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 423
[  592.176694][T13172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  592.189298][T13172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  592.353120][T13172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  592.362210][T13172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.376225][T13172] usb 3-1: Product: syz
[  592.381372][T13172] usb 3-1: Manufacturer: syz
[  592.391284][T13172] usb 3-1: SerialNumber: syz
21:37:34 executing program 3:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x0)

21:37:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0)

21:37:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:34 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl(r0, 0x0, &(0x7f00000002c0))

21:37:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd2a, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x4)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40804)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1}, 0x100)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$RTC_VL_CLR(r1, 0x7014)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@initr0, @jmp={0x5, 0x1, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000b40)='GPL\x00', 0x6, 0xde, &(0x7f0000000b80)=""/222, 0x41100, 0x0, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000000c80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x6, 0x0, 0x1}, 0x10}, 0x78)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000900)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @ldst={0x0, 0x0, 0x3, 0x404cd3deab66d8, 0x1, 0xfffffffffffffffe}, @ldst={0x0, 0x1, 0x0, 0xf, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x23}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x26}, @alu={0x4, 0x0, 0x0, 0x9, 0x1, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffff8}, @generic={0x7, 0x0, 0x9}], &(0x7f0000000980)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1a, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xd}, 0x10, 0x0, r3}, 0x78)
ioctl$RTC_WIE_ON(r2, 0x700f)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/vim2m\x00', 0x2, 0x0)

21:37:34 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000134030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:34 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'})

[  592.684094][T13172] cdc_ncm 3-1:1.0: bind() failure
21:37:34 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x1, [{}]}})

21:37:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  592.709499][T13172] cdc_ncm 3-1:1.1: bind() failure
[  592.714775][T24487] EXT4-fs (loop4): bad geometry: block count 53739776 exceeds size of device (256 blocks)
[  592.733377][T13172] usb 3-1: USB disconnect, device number 28
21:37:34 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
accept4$x25(r0, 0x0, 0x0, 0x0)

21:37:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003380)=ANY=[@ANYBLOB="280002"], 0x28}}, 0x0)

21:37:34 executing program 1:
socketpair(0x1, 0x0, 0x5, &(0x7f0000000080))

21:37:34 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000135030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:34 executing program 2:
syz_io_uring_setup(0x5b31, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x317}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))

21:37:35 executing program 5:
r0 = socket$kcm(0x29, 0x5, 0x0)
lookup_dcookie(0x7f, &(0x7f0000000000)=""/183, 0xb7)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000000c0), 0x4)
r1 = getpid()
waitid(0x1, r1, &(0x7f0000000780), 0x0, &(0x7f0000000800))
syz_io_uring_setup(0x7079, &(0x7f0000002980)={0x0, 0x85f3, 0x0, 0x3, 0x2ab}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000002a00))
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_setup(0x16c8, &(0x7f0000002a40)={0x0, 0x0, 0x2, 0x2, 0x162}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002ac0), &(0x7f0000002b00))
getpid()

21:37:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1001, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:35 executing program 1:
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x80a00)

21:37:35 executing program 3:
syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x81, 0x0)

[  592.947088][T24523] EXT4-fs (loop4): bad geometry: block count 53805312 exceeds size of device (256 blocks)
21:37:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:35 executing program 4:
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000138030c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

21:37:35 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x1f9, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x2, 0x1, 0x7, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x7fff, 0x20}, {0x6, 0x24, 0x1a, 0x400, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xbd, 0x24, 0x13, 0x7f, "2bd6128d880a0b36778e5da8df1fa22f388fa0f2027df630ec7842aafddac9727417e13ae363e712bbc84bdecef905a3fbdb5b432055a0fa98d6d936b8d648ed8a40873c599b82a2b5b956717acd2f3deeadfa13350d51a44131fcd485d93f21e9e0b5926a36e50eee4765b59680382770b62185421b439687286cbbe7248e277f3942b5cf1e2be4e74d31f98f436998b07d98cd076eb4aff612eabd8f1054ef0b611e43b541566e348eaf59dbd815b7eb1b9451151a43dfab"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0x71, 0x5, 0x0, 0x81}, @mdlm_detail={0xbd, 0x24, 0x13, 0x81, "ffd851c92b240f9c0a5cce8f118b11ea65f525fa029b5ffeff68461a372dcb9e5f2478e7765671a1e2cb997fa5cff529b8128bc1476bde3901a724a9fec922521ca1e03f69ba2e42a1822301514e5d9ad25aaa5afe6ebeebf156895b6db1336ee23f7ebd8e754dde0674cc320c0b72fc305d0e936e4c3479960602c8b918cda7bbae1afc976f13d7844d9a31f28ab0c83f2c462a8e49cc23128dd69f2ec1b3534fa3df62611c7c5fcb614d1531ee27c2bc3eb0dff1406cc776"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1a7, 0x2, 0x20, 0xdb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x34, 0x3, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xf8, 0x0, 0xff, 0xc3}, 0xbd, &(0x7f00000003c0)={0x5, 0xf, 0xbd, 0x3, [@generic={0x99, 0x10, 0xb, "e115ba33edd340862475573fe74b4ea549362bcb68776677df72fdceec390a6956965ad49a9f09ddfd126abf939882ea79148d883737480fbde6189ea4c4c3d63ee6216ae8515c47aeb097f3c75c8b1a2e4a74fa64fec7a97a10aa11a105956ef15ccfa5d2bd8eaf92c434035cb45238021a235d1f786849f8974b6294f6251de7106ff32037387401496d83b330f2320216bdb966ff"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x3, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0xf, 0xef4, [0xff30, 0xc060, 0xf]}]}, 0x5, [{0x1e, &(0x7f0000000480)=@string={0x1e, 0x3, "5e4d13453f1235188abf4ee4ddd854bc6cd319d8eea17c4f8456ab74"}}, {0x5d, &(0x7f00000004c0)=@string={0x5d, 0x3, "dd5c9dd975982eeb3972b070cd88a039ff2e56e589c131347a4d83f8ba5c7d61ef5b9a7f2d847dddc56bfae8e5ea8c3b6dfe28ed1a52220afd0d3e309cc258ffd12153d40e19d08cf7ecf74cc980d8409fce2d5053aa513abac705"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x95, &(0x7f0000000580)=@string={0x95, 0x3, "970d8c2c1fafc988c0c7f2e68efee1dc968bb43fcc3309486a2e3e98d8aab854fe8fccc198e52da744c0da740e0381e370e521c482ee3145d84a8c26c40189df00ef3ce2a82b3293579ff40823556e0a84b401458b7c61d76e67b6b9f1b381a4867ab67aa61e04948c25d8f2c87c8ecf6b9f9bed33f5e5ce42ac9f5abff9c60a527129bc4003257f1f74b4a6c2540eefd7d5cf"}}, {0x46, &(0x7f0000000640)=@string={0x46, 0x3, "edbb9041b11c9e9200e2ef3b4dd13a19b065ce66428ad14690a50e53de15e8103f5320ab5cb5316b6a46dc50aa105d2d004a5de8ed02dd06eeb4cea680b51bd3becdc291"}}]})

21:37:35 executing program 1:
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8)

21:37:35 executing program 1:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)

21:37:35 executing program 3:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x4000, 0x0)

21:37:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  593.162787][T24565] EXT4-fs (loop4): bad geometry: block count 54001920 exceeds size of device (256 blocks)
[  593.188628][T24561] ==================================================================
[  593.196741][T24561] BUG: KCSAN: data-race in io_sq_thread / percpu_ref_kill_and_confirm
[  593.204875][T24561] 
[  593.207197][T24561] write to 0xffff8880272a4800 of 8 bytes by task 24552 on cpu 1:
[  593.214906][T24561]  percpu_ref_kill_and_confirm+0x75/0x190
[  593.220623][T24561]  io_ring_ctx_wait_and_kill+0x31/0x370
[  593.226167][T24561]  io_uring_release+0x3e/0x50
[  593.230866][T24561]  __fput+0x243/0x4d0
[  593.235360][T24561]  ____fput+0x11/0x20
[  593.239439][T24561]  task_work_run+0x8e/0x110
[  593.243929][T24561]  do_exit+0x43d/0x1630
[  593.248074][T24561]  do_group_exit+0xc8/0x170
[  593.252567][T24561]  get_signal+0xf9b/0x1510
[  593.256976][T24561]  arch_do_signal+0x25/0x260
[  593.261565][T24561]  exit_to_user_mode_prepare+0xde/0x170
[  593.267104][T24561]  syscall_exit_to_user_mode+0x16/0x30
[  593.272563][T24561]  do_syscall_64+0x45/0x80
[  593.277009][T24561]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  593.282879][T24561] 
[  593.285197][T24561] read to 0xffff8880272a4800 of 8 bytes by task 24561 on cpu 0:
[  593.292825][T24561]  io_sq_thread+0x50f/0xcd0
[  593.297320][T24561]  kthread+0x1fd/0x220
[  593.301414][T24561]  ret_from_fork+0x1f/0x30
[  593.305835][T24561] 
[  593.308150][T24561] Reported by Kernel Concurrency Sanitizer on:
[  593.314323][T24561] CPU: 0 PID: 24561 Comm: io_uring-sq Not tainted 5.10.0-rc5-syzkaller #0
[  593.322815][T24561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  593.332888][T24561] ==================================================================
[  593.340960][T24561] Kernel panic - not syncing: panic_on_warn set ...
[  593.347541][T24561] CPU: 0 PID: 24561 Comm: io_uring-sq Not tainted 5.10.0-rc5-syzkaller #0
[  593.356027][T24561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  593.366075][T24561] Call Trace:
[  593.369365][T24561]  dump_stack+0x116/0x15d
[  593.373713][T24561]  panic+0x1e7/0x5fa
[  593.377605][T24561]  ? vprintk_emit+0x2f2/0x370
[  593.382285][T24561]  kcsan_report+0x67b/0x680
[  593.386782][T24561]  ? kcsan_setup_watchpoint+0x46a/0x4d0
[  593.392316][T24561]  ? io_sq_thread+0x50f/0xcd0
[  593.396981][T24561]  ? kthread+0x1fd/0x220
[  593.401213][T24561]  ? ret_from_fork+0x1f/0x30
[  593.405804][T24561]  ? __switch_to+0x14e/0x4c0
[  593.410386][T24561]  ? _raw_spin_unlock_irq+0x22/0x40
[  593.415577][T24561]  ? finish_task_switch+0x81/0x280
[  593.420856][T24561]  kcsan_setup_watchpoint+0x46a/0x4d0
[  593.426223][T24561]  io_sq_thread+0x50f/0xcd0
[  593.430737][T24561]  ? io_file_put_work+0x6b0/0x6b0
[  593.435790][T24561]  kthread+0x1fd/0x220
[  593.439852][T24561]  ? io_file_put_work+0x6b0/0x6b0
[  593.444866][T24561]  ? kthread_blkcg+0x80/0x80
[  593.449449][T24561]  ret_from_fork+0x1f/0x30
[  593.454399][T24561] Kernel Offset: disabled
[  593.458759][T24561] Rebooting in 86400 seconds..