xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a000)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {0x0, r6}], 0x1, "3e7e57e991ccf4"}) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/103, 0x67) 21:42:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private, @remote}}}], 0x20}, 0x0) [ 1107.644359][T12518] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 1107.644359][T12518] program syz-executor.2 not setting count and/or reply_len properly 21:42:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 21:42:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059f80)={{0x0, 0x4a8b, 0x2, 0x1ff, 0x200000, 0x2, 0x0, 0x9, 0x8, 0xfffeffff, 0x1, 0x0, 0x7fff, 0x8, 0xd8ce}, 0x8, [0x0]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000540), 0x7, 0x440) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{}, r7, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r8]}, @devid}) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a000)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {0x0, r6}], 0x1, "3e7e57e991ccf4"}) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/103, 0x67) 21:42:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c041000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:13 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f000000c180)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x7fbff800) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 21:42:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) [ 1107.885394][T12582] loop5: detected capacity change from 0 to 4 [ 1107.897224][T12582] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1107.909293][T12582] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1108.015004][T12582] loop5: detected capacity change from 0 to 4 [ 1108.024469][T12582] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1108.036506][T12582] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059f80)={{0x0, 0x4a8b, 0x2, 0x1ff, 0x200000, 0x2, 0x0, 0x9, 0x8, 0xfffeffff, 0x1, 0x0, 0x7fff, 0x8, 0xd8ce}, 0x8, [0x0]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000540), 0x7, 0x440) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{}, r7, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r8]}, @devid}) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a000)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {0x0, r6}], 0x1, "3e7e57e991ccf4"}) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/103, 0x67) 21:42:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:42:13 executing program 1: socketpair(0x0, 0x0, 0x0, 0xfffffffffffffffe) 21:42:13 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f000000c180)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x7fbff800) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 21:42:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c201000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:13 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xfc000000, 0x0}}], 0x300, 0x0, 0x0) 21:42:13 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7, &(0x7f0000000040)={[0x4]}, 0x8) 21:42:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 1108.396958][T12606] loop5: detected capacity change from 0 to 4 [ 1108.432784][T12606] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1108.445014][T12606] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1108.492280][T12609] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 1108.492280][T12609] program syz-executor.2 not setting count and/or reply_len properly 21:42:13 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}], 0x1, 0x0) 21:42:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0104000000000000000002"], 0x44}}, 0x0) 21:42:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:42:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x39}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x33e5b16ef9436ed2}, 0x0) [ 1108.645692][T12606] loop5: detected capacity change from 0 to 4 [ 1108.655688][T12606] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1108.668111][T12606] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059f80)={{0x0, 0x4a8b, 0x2, 0x1ff, 0x200000, 0x2, 0x0, 0x9, 0x8, 0xfffeffff, 0x1, 0x0, 0x7fff, 0x8, 0xd8ce}, 0x8, [0x0]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000540), 0x7, 0x440) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{}, r7, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r8]}, @devid}) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a000)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {0x0, r6}], 0x1, "3e7e57e991ccf4"}) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c94160096aa1fae1aaf84c4288f4f1749057306da365999d9b3b3d276365889c8", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/103, 0x67) 21:42:14 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl(r0, 0x0, &(0x7f0000001740)="3c0d5629c83e3a") 21:42:14 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xfe80ffff, 0x0}}], 0x300, 0x0, 0x0) 21:42:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x2c}}, 0x0) 21:42:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20050001) 21:42:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001100ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="ad", 0x1}], 0x1}, 0x0) 21:42:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040)=@abs, 0x6e, 0x0}, 0x0) 21:42:14 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x10162) 21:42:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) [ 1109.250515][T12660] loop5: detected capacity change from 0 to 4 [ 1109.259682][T12660] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1109.271900][T12660] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000191c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000019300)={&(0x7f00000004c0), 0xc, &(0x7f00000192c0)={&(0x7f0000000540)={0x18, r1, 0x409, 0x0, 0x0, {{}, {@void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME, @NL80211_ATTR_BSS_SHORT_PREAMBLE, @NL80211_ATTR_AP_ISOLATE, @NL80211_ATTR_BSS_CTS_PROT]}, 0x1c}}, 0x0) [ 1109.332877][T12662] sg_write: data in/out 167162/24 bytes for SCSI command 0x67-- guessing data in; [ 1109.332877][T12662] program syz-executor.2 not setting count and/or reply_len properly [ 1109.370381][T12660] loop5: detected capacity change from 0 to 4 21:42:14 executing program 4: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r2, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 1109.385591][T12660] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1109.398232][T12660] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1109.429844][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1109.470970][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 21:42:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000191c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f5f6ffffff00006d421002"], 0x30}}, 0x0) 21:42:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001200ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1110.086260][T12703] loop5: detected capacity change from 0 to 4 [ 1110.093797][T12703] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1110.105877][T12703] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1110.124466][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:42:15 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xfec0ffff, 0x0}}], 0x300, 0x0, 0x0) 21:42:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000120055022dbd70ffff7f0010000000000000083b0d00"/41, @ANYRES32=0x0, @ANYBLOB="000000000500000003000000f8ffffff1a000100cbccfc1da6"], 0x13c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 21:42:15 executing program 4: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r2, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 21:42:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000000a0601"], 0x74}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0x3}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004600)=[{{&(0x7f0000000240)=@rc={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000004700)) 21:42:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001400ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:15 executing program 2: unshare(0x40000600) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) [ 1110.142597][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:42:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1110.232904][T12723] loop5: detected capacity change from 0 to 4 [ 1110.257680][T12723] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1110.269782][T12723] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001900ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz1'}, 0x4) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 21:42:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000040)) 21:42:15 executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1', "d2927f1ac0911daedde7f82e5f03b69258839d577574739ea84c024bdbdd8ea526f71450c96ed6e4955f2ae8a9f950b431448d8c1ea0637af408b143b8c5f0e22166910b53eace806d2ffe43c16a1fea931ea5e8589496ef56e14264e1f97b77712113d87bb86a56749ca43b3c8f4a5d87f74138"}, 0x78) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 1110.396836][T12757] loop5: detected capacity change from 0 to 4 [ 1110.428061][T12757] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1110.440479][T12757] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890b, &(0x7f0000000000)) [ 1110.515131][T12757] loop5: detected capacity change from 0 to 4 [ 1110.549300][T12757] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1110.561615][T12757] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:16 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xff000000, 0x0}}], 0x300, 0x0, 0x0) 21:42:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x47, 0x0, &(0x7f00000000c0)) 21:42:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:16 executing program 4: fcntl$lock(0xffffffffffffffff, 0xb, &(0x7f00000000c0)) 21:42:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@un=@file={0xa}, 0xa) 21:42:16 executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1', "d2927f1ac0911daedde7f82e5f03b69258839d577574739ea84c024bdbdd8ea526f71450c96ed6e4955f2ae8a9f950b431448d8c1ea0637af408b143b8c5f0e22166910b53eace806d2ffe43c16a1fea931ea5e8589496ef56e14264e1f97b77712113d87bb86a56749ca43b3c8f4a5d87f74138"}, 0x78) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 21:42:16 executing program 1: unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800) 21:42:16 executing program 4: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0xfffffffffffffffe}}, 0x0) 21:42:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) 21:42:16 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 21:42:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, 0xffffffffffffffff) [ 1111.163743][T12795] loop5: detected capacity change from 0 to 4 [ 1111.185972][T12795] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1111.198143][T12795] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:16 executing program 2: socket(0x1d, 0x0, 0x5) [ 1111.310270][T12795] loop5: detected capacity change from 0 to 4 [ 1111.322014][T12795] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1111.336161][T12795] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:16 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xffff0000, 0x0}}], 0x300, 0x0, 0x0) 21:42:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fchown(r0, 0x0, 0x0) 21:42:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 21:42:16 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 21:42:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:16 executing program 3: msgrcv(0x0, 0x0, 0x75, 0x0, 0x0) 21:42:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@abs={0x8}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000080)="30fb82056bb011190362b8e4bf5af5a06cd297bdeade7650a932809ca8d9db146adfacadfb1a2c88c1afd48ef0cecb54ca4210129986832d6b9c4c3d360cefcf21465a9e4bb00ecf4c91f0ad2c6462b7e920507db43e99ff7d2426a8", 0x5c}, {&(0x7f0000000140)="a1", 0x1}], 0x2}, 0x20004) 21:42:16 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x95223411a2acf8f8, 0x0) 21:42:16 executing program 2: accept$inet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10) [ 1111.503700][T12837] loop5: detected capacity change from 0 to 4 [ 1111.519419][T12837] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1111.531495][T12837] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) 21:42:16 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000440)=@in, &(0x7f0000000480)=0x10, 0x0) 21:42:16 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000400)=0x4, 0x4) [ 1111.589663][T12837] loop5: detected capacity change from 0 to 4 [ 1111.597193][T12837] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1111.609245][T12837] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:17 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xffff80fe, 0x0}}], 0x300, 0x0, 0x0) 21:42:17 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) 21:42:17 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x10, 0x2}, 0x10) 21:42:17 executing program 3: open$dir(0x0, 0x2b85692336c09a6f, 0x0) 21:42:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c102000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:17 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000500)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 21:42:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 21:42:17 executing program 2: fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 21:42:17 executing program 3: lchown(&(0x7f0000000000)='./file0/file0/file0\x00', 0xffffffffffffffff, 0x0) 21:42:17 executing program 4: socket(0x1, 0x0, 0x65) [ 1111.821625][T12881] loop5: detected capacity change from 0 to 4 [ 1111.836746][T12881] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1111.848898][T12881] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002200ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:17 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 1112.011896][T12910] loop5: detected capacity change from 0 to 4 [ 1112.023487][T12910] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.035543][T12910] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:17 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xffffc0fe, 0x0}}], 0x300, 0x0, 0x0) 21:42:17 executing program 4: msgrcv(0xffffffffffffffff, 0x0, 0xfffffe9c, 0x0, 0x0) 21:42:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 21:42:17 executing program 2: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 21:42:17 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000004c0)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000013c0)=[@cred], 0x20}, 0x0) 21:42:17 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) shutdown(r0, 0x1) 21:42:17 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) [ 1112.129323][T12910] loop5: detected capacity change from 0 to 4 [ 1112.140037][T12910] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.152426][T12910] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:17 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x0) 21:42:17 executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4000) 21:42:17 executing program 4: setuid(0x0) pipe2(0x0, 0x0) 21:42:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002500ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:17 executing program 3: open$dir(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) [ 1112.314078][T12949] loop5: detected capacity change from 0 to 4 [ 1112.333034][T12949] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.345306][T12949] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:17 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xffffffe0, 0x0}}], 0x300, 0x0, 0x0) 21:42:17 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 21:42:17 executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4000) 21:42:17 executing program 2: setuid(0xffffffffffffffff) r0 = getuid() r1 = getuid() setresuid(r0, r1, 0x0) 21:42:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/133, 0x85}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)=""/146, 0x92}], 0x4) shutdown(r2, 0x0) 21:42:17 executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4000) 21:42:17 executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4000) [ 1112.423826][T12949] loop5: detected capacity change from 0 to 4 [ 1112.430976][T12949] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.443558][T12949] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:17 executing program 2: mknodat(0xffffffffffffffff, 0x0, 0x1010, 0x8) 21:42:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/133, 0x85}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) read(r2, &(0x7f0000000180)=""/96, 0x60) shutdown(r2, 0x0) 21:42:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002700ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='dctcp\x00', 0x6) 21:42:17 executing program 1: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 1112.582787][T12993] loop5: detected capacity change from 0 to 4 [ 1112.605010][T12993] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.617068][T12993] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1112.667284][T12993] loop5: detected capacity change from 0 to 4 [ 1112.681139][T12993] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.694021][T12993] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:18 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xffffffff, 0x0}}], 0x300, 0x0, 0x0) 21:42:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x401, &(0x7f0000000000)="f57a5b49", 0x4) 21:42:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@abs={0x8}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000080)="30fb82056bb011190362b8e4bf5af5a06cd297bdeade7650a932809ca8d9db146adfacadfb1a2c88c1afd48ef0cecb54ca4210129986832d6b9c4c3d360cefcf21465a9e4bb00ecf4c91f0ad2c6462b7e920507db43e99ff7d2426a8", 0x5c}, {&(0x7f0000000140)="a1", 0x1}, {0x0}], 0x3, &(0x7f0000000740)=[@cred], 0x20}, 0x20004) 21:42:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002e00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1112.810678][T13023] loop5: detected capacity change from 0 to 4 [ 1112.828521][T13023] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.840576][T13023] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1112.926440][T13023] loop5: detected capacity change from 0 to 4 [ 1112.938753][T13023] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1112.951223][T13023] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x8, 0x0, 0x0) 21:42:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000340)=@in={0x10, 0x2}, 0x10) 21:42:18 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:42:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c003f00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1113.396373][T13052] loop5: detected capacity change from 0 to 4 [ 1113.406079][T13052] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1113.419692][T13052] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1113.464758][T13052] loop5: detected capacity change from 0 to 4 [ 1113.478634][T13052] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1113.491072][T13052] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:18 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x10, 0x2}, 0xffffffffffffff8e) 21:42:18 executing program 1: accept4(0xffffffffffffffff, &(0x7f0000000440)=@in, 0x0, 0x0) 21:42:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 21:42:18 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000004c0)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000013c0)}, 0x0) 21:42:19 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x2}}], 0x300, 0x0, 0x0) 21:42:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x401, 0x0, 0x0) 21:42:19 executing program 4: connect(0xffffffffffffff9c, 0x0, 0x0) 21:42:19 executing program 3: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0xfffffffffffffffe}, {0x0, 0x100000000}}, 0x0) 21:42:19 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)}, 0x0) 21:42:19 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2000, 0x0, &(0x7f0000000080)) 21:42:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30) 21:42:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 21:42:19 executing program 3: open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x2, 0x0) [ 1113.754651][T13094] loop5: detected capacity change from 0 to 4 [ 1113.790729][T13094] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:19 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x108, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 21:42:19 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [ 1113.805072][T13094] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1113.873668][T13094] loop5: detected capacity change from 0 to 4 [ 1113.893002][T13094] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1113.905075][T13094] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:19 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x4}}], 0x300, 0x0, 0x0) 21:42:19 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) shutdown(r0, 0x0) 21:42:19 executing program 2: semget(0x3, 0x0, 0x64a) 21:42:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 21:42:19 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 21:42:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004500ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:19 executing program 3: msgctl$IPC_SET(0x0, 0x1, 0x0) fork() fork() 21:42:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004800ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:19 executing program 1: fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 21:42:19 executing program 2: socket(0x1c, 0x3, 0x4) 21:42:19 executing program 4: utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1114.032934][T13136] loop5: detected capacity change from 0 to 4 [ 1114.052049][T13136] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1114.064128][T13136] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:19 executing program 1: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) fork() [ 1114.135937][T13156] loop5: detected capacity change from 0 to 4 [ 1114.145247][T13156] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1114.157957][T13156] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:19 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x7}}], 0x300, 0x0, 0x0) 21:42:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:19 executing program 2: setuid(0x0) pipe2(&(0x7f0000000180), 0x0) 21:42:19 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 21:42:19 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) 21:42:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) 21:42:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c006000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:19 executing program 4: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1114.340159][T13177] loop5: detected capacity change from 0 to 4 [ 1114.353057][T13177] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1114.366319][T13177] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:19 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) connect(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 21:42:19 executing program 3: lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 21:42:19 executing program 2: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{}, {0x0, 0x100000000}}, 0x0) 21:42:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred], 0x20}, 0x0) [ 1114.457892][T13193] loop5: detected capacity change from 0 to 4 [ 1114.481118][T13193] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1114.494103][T13193] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:19 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x10}}], 0x300, 0x0, 0x0) 21:42:19 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 21:42:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, 0x0, 0x0, 0x0) 21:42:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='vegas\x00', 0x6) 21:42:19 executing program 4: getpgrp(0xffffffffffffffff) pipe2(&(0x7f0000000000), 0x0) 21:42:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c006800ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:20 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:42:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 21:42:20 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) [ 1114.677230][T13225] loop5: detected capacity change from 0 to 4 [ 1114.701350][T13225] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1114.713852][T13225] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, &(0x7f0000000400)=[{&(0x7f0000000040)="b8ef313592672c3532b056df90b34d4e6f3cff79aa9a328f6491dac56c164e56787ed87a679bdf06fa09d1", 0x2b}, {&(0x7f0000000080)="5011", 0x2}, {&(0x7f00000000c0)="1ff687a4ca35692aba72465e4bd0409566ddd5d33b0554459adccd8d57769521210f5cd945", 0x25}, {&(0x7f0000000100)="7ccaae4599d3d18671f226", 0xb}], 0x4, &(0x7f00000004c0)=[{0x78, 0x0, 0x0, "b55dda12ce28e215f7f4a1e858b147bac2a649704c7a6162ea7eb47d04a1ba6e8ceabab76a1155efc551ead85429135ada3a3fe863f951c888106d4f0eec57808074dbbccb182d863b9b1ed012f26f9e74734c69603d26bbce0ed3905351303a64"}, {0x70, 0x0, 0x0, "7836ff855a7cfd70536307312b73bfaf30e6e94e34457d98d4fec5064861217099cb6c1b3c243d06700b31c19d35dc6b41bb4a2dbf0da461c9fe65f10ede6bddbaff5ed00061884398ea93597acf25f8281992da6ede3034f6"}], 0xe8}, 0x2008d) 21:42:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c006c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:20 executing program 4: pipe2(0x0, 0x10000c) [ 1114.832780][T13250] loop5: detected capacity change from 0 to 4 [ 1114.851538][T13250] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1114.863728][T13250] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfc}}], 0x300, 0x0, 0x0) 21:42:20 executing program 2: renameat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x0) 21:42:20 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0xffffffffffffffff}}) 21:42:20 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x70, 0x0, 0x0, "b55dda12ce28e215f7f4a1e858b147bac2a649704c7a6162ea7eb47d04a1ba6e8ceabab76a1155efc551ead85429135ada3a3fe863f951c888106d4f0eec57808074dbbccb182d863b9b1ed012f26f9e74734c69603d26bbce"}, {0x40, 0x0, 0x0, "7836ff855a7cfd70536307312b73bfaf30e6e94e34457d98d4fec5064861217099cb6c1b3c243d0670"}], 0xb0}, 0x0) 21:42:20 executing program 3: fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 21:42:20 executing program 2: fcntl$lock(0xffffffffffffffff, 0xb, 0x0) 21:42:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, 0x0, 0x0) 21:42:20 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x100, 0x0, 0x0) [ 1114.958481][T13250] loop5: detected capacity change from 0 to 4 21:42:20 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) shutdown(r0, 0x0) 21:42:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c007400ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:20 executing program 2: clock_gettime(0xf, &(0x7f0000000000)) 21:42:20 executing program 4: socket(0x1c, 0x3, 0x0) 21:42:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x700}}], 0x300, 0x0, 0x0) 21:42:20 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept$inet(r0, &(0x7f0000000640), &(0x7f0000000680)=0x10) 21:42:20 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) futimesat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 21:42:20 executing program 2: faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) 21:42:20 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x136) [ 1115.164294][T13298] loop5: detected capacity change from 0 to 4 [ 1115.174193][T13298] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.186255][T13298] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:20 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, 0x0, 0x0) 21:42:20 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 21:42:20 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 1115.265984][T13298] loop5: detected capacity change from 0 to 4 [ 1115.274928][T13298] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.287020][T13298] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c007a00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:20 executing program 3: fork() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:42:20 executing program 1: open$dir(&(0x7f0000000000)='.\x00', 0x200c40, 0x0) 21:42:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, &(0x7f0000000400)=[{&(0x7f0000000040)="b8", 0x1}, {0x0}, {&(0x7f0000000100)='|', 0x1}], 0x3, &(0x7f00000004c0)=[{0x78, 0x0, 0x0, "b55dda12ce28e215f7f4a1e858b147bac2a649704c7a6162ea7eb47d04a1ba6e8ceabab76a1155efc551ead85429135ada3a3fe863f951c888106d4f0eec57808074dbbccb182d863b9b1ed012f26f9e74734c69603d26bbce0ed3905351303a64"}, {0x38, 0x0, 0x0, "7836ff855a7cfd70536307312b73bfaf30e6e94e34457d98d4fec5064861217099"}], 0xb0}, 0x0) [ 1115.393724][T13333] loop5: detected capacity change from 0 to 4 [ 1115.413847][T13333] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.425933][T13333] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x2000}}], 0x300, 0x0, 0x0) 21:42:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 21:42:20 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 21:42:20 executing program 4: chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 21:42:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) [ 1115.511083][T13333] loop5: detected capacity change from 0 to 4 [ 1115.525051][T13333] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.537119][T13333] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/133, 0x85}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)=""/146, 0x92}], 0x5) shutdown(r2, 0x0) 21:42:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c0fff00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:20 executing program 2: setuid(0xffffffffffffffff) setresuid(0xffffffffffffffff, 0x0, 0x0) 21:42:20 executing program 3: socket(0x2, 0x3, 0x5) 21:42:20 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) 21:42:20 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)) [ 1115.690913][T13379] loop5: detected capacity change from 0 to 4 [ 1115.721115][T13379] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:21 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) [ 1115.733839][T13379] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:21 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x4000}}], 0x300, 0x0, 0x0) 21:42:21 executing program 2: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0xc7000000}}, 0x0) 21:42:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)) 21:42:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000740)=[@cred], 0x20}, 0x20004) [ 1115.798068][T13379] loop5: detected capacity change from 0 to 4 [ 1115.813094][T13379] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.825638][T13379] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:21 executing program 2: msgget(0x1, 0x24a) 21:42:21 executing program 1: connect(0xffffffffffffffff, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 21:42:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000200ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 21:42:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 21:42:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f00000002c0), 0x4) 21:42:21 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfc00}}], 0x300, 0x0, 0x0) 21:42:21 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/67, &(0x7f0000000080)=0x43) 21:42:21 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@rights, @cred, @cred, @rights, @rights], 0xb0}, 0x0) 21:42:21 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x25, 0x0, 0x0) 21:42:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) [ 1116.605264][T13450] loop5: detected capacity change from 0 to 4 [ 1116.640396][T13450] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1116.652450][T13450] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, 0x0}, 0x0) 21:42:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2000, 0x0, 0x0) 21:42:22 executing program 2: socketpair(0x1, 0x3, 0x7, 0x0) [ 1116.826840][T13450] loop5: detected capacity change from 0 to 4 [ 1116.837058][T13450] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1116.849103][T13450] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000300ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:22 executing program 1: pipe2(&(0x7f0000000140), 0x0) 21:42:22 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f00000004c0)}, 0x0) 21:42:22 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@rights, @cred, @cred, @rights, @rights, @cred], 0xe8}, 0x0) 21:42:22 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 21:42:22 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xff00}}], 0x300, 0x0, 0x0) 21:42:22 executing program 1: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x28000000) 21:42:22 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 1116.955985][T13500] loop5: detected capacity change from 0 to 4 21:42:22 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:42:22 executing program 3: dup2(0xffffffffffffff9c, 0xffffffffffffff9c) 21:42:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@abs={0x8}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000080)="30fb82056bb011190362b8e4bf5af5a06cd297bdeade7650a932809ca8d9db146adfacadfb1a2c88c1afd48ef0cecb54ca4210129986832d6b9c4c3d360cefcf21465a9e4bb00ecf4c91f0ad2c6462b7e920507db43e99ff7d2426a8", 0x5c}, {&(0x7f0000000140)="a1", 0x1}, {0x0}], 0x3}, 0x20004) [ 1116.995931][T13500] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.008177][T13500] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:22 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) [ 1117.134011][T13500] loop5: detected capacity change from 0 to 4 [ 1117.143311][T13500] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.156260][T13500] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000400ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, &(0x7f0000000040)) 21:42:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x401, &(0x7f0000000000)="f57a5b49741b345452da7bbaa48c9b58c9a39d5c1e", 0x15) 21:42:22 executing program 4: pipe2(&(0x7f00000000c0), 0x0) pipe2(&(0x7f0000000000), 0x0) 21:42:22 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000002380), 0x400, 0x0) 21:42:22 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x300, 0x0, 0x0) 21:42:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 21:42:22 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) 21:42:22 executing program 1: setuid(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) 21:42:22 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000400), 0x4) [ 1117.298414][T13547] loop5: detected capacity change from 0 to 4 [ 1117.335295][T13547] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:22 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) fcntl$setown(r0, 0x6, 0x0) 21:42:22 executing program 1: futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) [ 1117.347645][T13547] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1117.486741][T13547] loop5: detected capacity change from 0 to 4 [ 1117.497157][T13547] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.509212][T13547] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000500ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:22 executing program 2: setuid(0xffffffffffffffff) r0 = getuid() r1 = getuid() r2 = getuid() setresuid(r0, r1, r2) 21:42:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 21:42:22 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000980), &(0x7f00000009c0)=0x10) 21:42:22 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x200000}}], 0x300, 0x0, 0x0) 21:42:22 executing program 3: fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 21:42:22 executing program 1: socket(0x10, 0x0, 0x40) 21:42:22 executing program 3: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000c40)) 21:42:22 executing program 2: msgsnd(0x0, &(0x7f00000010c0), 0x8, 0x0) [ 1117.598485][T13589] loop5: detected capacity change from 0 to 4 21:42:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="a1", 0x1}], 0x2}, 0x0) 21:42:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x20, 0x0, &(0x7f00000000c0)) 21:42:23 executing program 3: socket(0x1c, 0x0, 0x80) [ 1117.654326][T13589] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.666389][T13589] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1117.775255][T13589] loop5: detected capacity change from 0 to 4 [ 1117.786737][T13589] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.798830][T13589] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 21:42:23 executing program 2: getpeername$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) 21:42:23 executing program 4: wait4(0x0, 0x0, 0x0, &(0x7f0000000440)) 21:42:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000600ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:23 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x3665c4}}], 0x300, 0x0, 0x0) 21:42:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cubic\x00', 0x8) 21:42:23 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 21:42:23 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) 21:42:23 executing program 3: fchmodat(0xffffffffffffff9c, 0x0, 0x0) 21:42:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) fcntl$lock(r0, 0xd, &(0x7f0000000000)) [ 1117.916834][T13638] loop5: detected capacity change from 0 to 4 21:42:23 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r0, &(0x7f0000000500)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 21:42:23 executing program 1: fcntl$lock(0xffffffffffffffff, 0xd, &(0x7f0000000000)) [ 1117.982811][T13638] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.994963][T13638] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:23 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x400, &(0x7f0000000040), 0x4) 21:42:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000080)='P', 0x1}, {&(0x7f00000000c0)="1f", 0x1}], 0x3, &(0x7f00000004c0)=[{0x78, 0x0, 0x0, "b55dda12ce28e215f7f4a1e858b147bac2a649704c7a6162ea7eb47d04a1ba6e8ceabab76a1155efc551ead85429135ada3a3fe863f951c888106d4f0eec57808074dbbccb182d863b9b1ed012f26f9e74734c69603d26bbce0ed3905351303a64"}, {0x70, 0x0, 0x0, "7836ff855a7cfd70536307312b73bfaf30e6e94e34457d98d4fec5064861217099cb6c1b3c243d06700b31c19d35dc6b41bb4a2dbf0da461c9fe65f10ede6bddbaff5ed00061884398ea93597acf25f8281992da6ede3034f6"}], 0xe8}, 0x2008d) 21:42:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)='|', 0x1}], 0x4}, 0x0) [ 1118.086182][T13638] loop5: detected capacity change from 0 to 4 [ 1118.094578][T13638] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.106914][T13638] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000700ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:23 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x300, 0x0, 0x0) 21:42:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, &(0x7f0000000400)=[{&(0x7f0000000040)="b8", 0x1}, {0x0}, {&(0x7f0000000100)='|', 0x1}], 0x3, &(0x7f00000004c0)=[{0x10}], 0x10}, 0x0) 21:42:23 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 21:42:23 executing program 3: perf_event_open$cgroup(&(0x7f0000001740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x89e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x8, 0xffffffffffffffff, 0x6) 21:42:23 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 21:42:23 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 1118.242151][T13691] loop5: detected capacity change from 0 to 4 [ 1118.250235][T13691] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.262308][T13691] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:23 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 21:42:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000800ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:23 executing program 1: perf_event_open$cgroup(&(0x7f0000001740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x89e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1118.341438][T13691] loop5: detected capacity change from 0 to 4 [ 1118.361976][T13691] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.374215][T13691] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:23 executing program 4: socketpair(0x2b, 0x1, 0x401, &(0x7f0000000680)) [ 1118.457856][T13728] loop5: detected capacity change from 0 to 4 [ 1118.466693][T13728] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.478973][T13728] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:23 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x300, 0x0, 0x0) 21:42:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1423}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:23 executing program 3: perf_event_open$cgroup(&(0x7f0000002c80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000900ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) close(r0) 21:42:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) 21:42:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 21:42:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000a00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:23 executing program 2: perf_event_open$cgroup(&(0x7f0000002c80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 21:42:24 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000104c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="87", 0x1}], 0x1}, 0x0) 21:42:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1118.621108][T13745] loop5: detected capacity change from 0 to 4 [ 1118.636151][T13745] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.648361][T13745] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000240)=@nl, 0x80, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000400)=[@txtime={{0x18}}], 0x18}, 0x0) [ 1118.743273][T13759] loop5: detected capacity change from 0 to 4 [ 1118.760088][T13759] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.772164][T13759] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x7000000}}], 0x300, 0x0, 0x0) 21:42:24 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000780)) 21:42:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) 21:42:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000104c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="874858043a7ccd3051c026", 0xb}, {&(0x7f0000000080)="17fa49e00db629811c479f7afef74d059d95326089cf538a0e8470c1968db7641df6d3d3d3a9f6ab90a1c2ccf34ab16dad6f945c700d6b72569b882fdf244724239821fdff8604f0c4829e4ec28968fab4bb7414ed45bb6e8927559b61fd00d10bc89c1719031087a1be350e8cb3931108bf8d470627556682b2a8a22a56046c85b6b5a1be866f5e468683efe20c1cf2722595f9e7b8084ede3a8c4668f3ff576275331a0d3b23038125da007cdd78a2684ed9563bae75532c558ddd31aae0b401", 0xc1}, {&(0x7f0000000180)="e4b4a6e2a1dcbdfd5916986cc5a27de896e847dd1669a42d817e6dcbf2d687cd2c95b842b720ce0d02755909f08fc6d9aaf201cd2538c3ece2aed28351650a9539b5e68c74973f0cd9993f5a42ae2990b87371c22102e8b9af3c5f313569", 0x5e}, {&(0x7f0000000200)="49e56df08d95b926bfe4cd5de1aeaced89dba765d4e399f999051f7ca8ce110ec6677409f2565d8589d0015c78d0d6e459113c5b9d8f704b73980c76c3cccd1672a4ea4149115fc85bf2ad2dbc264fe9b5550411d051", 0x56}, {&(0x7f0000000280)="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", 0xe81}], 0x5}, 0x0) [ 1118.853446][T13759] loop5: detected capacity change from 0 to 4 [ 1118.865345][T13759] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1118.877584][T13759] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x10101) 21:42:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000b00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:24 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 21:42:24 executing program 4: socketpair(0x3, 0x0, 0xa135, &(0x7f0000000000)) 21:42:24 executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000680)) [ 1118.985879][T13803] loop5: detected capacity change from 0 to 4 [ 1118.997259][T13803] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.009370][T13803] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:24 executing program 1: socketpair(0x18, 0x0, 0x4, &(0x7f00000000c0)) [ 1119.126459][T13827] loop5: detected capacity change from 0 to 4 [ 1119.153781][T13827] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.166264][T13827] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x10000000}}], 0x300, 0x0, 0x0) 21:42:24 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10) 21:42:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000104c0)={0x0, 0x0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000000080)="17", 0x1}, {&(0x7f0000000180)="e4", 0x1}, {&(0x7f0000000280)="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", 0x1000}], 0x4}, 0x0) 21:42:24 executing program 4: perf_event_open$cgroup(&(0x7f0000002c80)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) [ 1119.209518][T13827] loop5: detected capacity change from 0 to 4 [ 1119.225116][T13827] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.237366][T13827] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000d00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 21:42:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000104c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="874858043a7ccd3051c026", 0xb}, {&(0x7f0000000080)="17fa49e00db629811c479f7afef74d059d95326089cf538a0e8470c1968db7641df6d3d3d3a9f6ab90a1c2ccf34ab16dad6f945c700d6b72569b882fdf244724239821fdff8604f0c4829e4ec28968fab4bb7414ed45bb6e8927559b61fd00d10bc89c1719031087a1be350e8cb3931108bf8d470627556682b2a8a22a56046c85b6b5a1be866f5e468683efe20c1cf2722595f9e7b8084ede3a8c4668f3ff576275331a0d3b23038125da007cdd78a2684ed9563bae75532c558ddd31aae0b401", 0xc1}, {&(0x7f0000000180)="e4b4a6e2a1dcbdfd5916986cc5a27de896e847dd1669a42d817e6dcbf2d687cd2c95b842b720ce0d02755909f08fc6d9aaf201cd2538c3ece2aed28351650a9539b5e68c74973f0cd9993f5a42ae2990b87371c22102e8b9af3c5f313569", 0x5e}, {&(0x7f0000000280)="c0a9853bae526f61d59ac8557a79627270b130de38a64cf000f11cd696aee963518c732f5fa4aa7023b200703d0cfa5d2431cb5102cd9d96ce2e7b915b1f76bee327bcb08d2c8a43f99fb0ad630bd9bd9137eab56aaa8990e79f35daa29ce0b52aacd630d5e8d428f40a2a5563e5bc198fff97a0cb18f8a933930deca129446e871ff17a4fe779681c25506c8fb2b633daf18c0c487a660e95c85ed2fab82cde7f8f035896748a9e7655ac81f9b2b1f45c9b494b4a3448f6ee68935ca5f31cc4f7916e6ae613829433c4eeabc9379ca4672b2b04f12615494334a55ab27c75e84ae8fca659dd8c0ddb2d83fa188e67997835a1a823559c69fcb26fb20ba7ed80c010a40090f9f9df60e5a6d49d45091dcb6d1919981e5fdbd32b355184599daa96944a52db382c50e0c473bb245838525e0548e7444ce966dfadd9550c9e09fb2e2ff967691cd0ad1e70edb1a0e7d209d0ece64af79353dfa97c5259508d62dd2916eea0562931f9ef2e26b9c984a9fca89cd16b29bca1dd77d244b79cccd8bb71f274cbbbd8541bacb5b8e8ec1e06bd10ef6ecad18a96efbc487bde4ac05c97e7db0bb76a2d2f0df036a51bd054cec44a453181412c5cd17c8dbe50af7a301fc04f72d11877c90139a688626aa86875cee72134449005836159fdb197ace66e28b89035992adcfbd5b7cbe4678c15b4428d9725371151fdd0fc306cb3c7cac7caad9ed6377a9f81d7ed40046c3266d14d1df152ad7d82d486c6ba896d97de0e3d4815e82ba6e5c74fdd1e8bae0ae26eacf30c1b28bf913e8c3b62032b6fcbd05ed4c814b55bbf8d5121f6ebb5d5fafca95cec1fb752d126b230413e6f0b4692b35527949c67f4297972d2ccd2b300d28f5af52747a31a32ea0b04bc67b2e8fb891ccc300fd42dc58f774382c39729fded3c437698586f224a2746130763dceae4cda0fbf65bce908f6df6dee9237eeeced2917661f3bd16ad261147b8b009f9702075066a155450dca6e322366c94c01e57f03dea1020fd9447922a8baf17ef94bf62701cbef921a8b2c68c644edfc060b5c4d9b0003871c43489c59c936a954346e62d99c1b0c8537c7d2a1e65bb276213f9e90b7f718ee96b49e5f788f65e63bb88d8652f12b699747184c10a3c463a684d070f41f028fbf537d00723f22d56a89a65f8b4cd6c6b10367a9193084405007cec6951c4bc40c0d30293a255bb0c4d5d7c19b031320c5904de8378291100cd6fbfb2fc42c854afc356266f5d9666daacd15f73f3faf75ec62814a0054600d104117df93b0c7269cd5021cd92582de7a4ad9269068e9337d9e6fbd96cacd7ca18988f4a3a770ce1c6476b4c01a705bd73e8a093ecac45d3dfdacc62adb295428c9fc30bf2cc23205d7fef0e2805b29323ab163e2cccb24d307f48926c28df038a33fbb3adb56a2390104dc1e5c79b6b6c2e06df0e29a86a50591a6b57b4da75c72759f6932c5512cd2da44e857c76d5e41260d480aa3472cdb38e60fdc54584f0cc696bb3731096260930a77964fecb9ee631eb3dc5dfc7d99f5c1dd834bbeecdd1774ab29e699c7cea415b5ad3f2a4d7b36609d39ca980c53f34fa74a2d8fe9f0afa9b85b8f9c6e372766287665a16b59a6698c392a6723b716108de0a8a73f5d491f1b180365a61f297e070631ac9e6b96c3d878c2e695483251bca3bb41a075bff648fb9bed47649f2416c2001fe5eb5008473b4e9dfae98fa6b1f9001fae4ba8bbac5d7b7498f478db45d37ce62739b73f0d0824366a32117190c1542f60abb04856177f4f96037e2257d50f680fe818fc9433d2361017a34cbafb49a2ce2ce22c3f6bb4fb9b1080a2464c8d54f7c323dae476fd238340399390ea4d36613cf2281d214f2c79d5862a5509285a8f40d8a638c5c25d6238b581068d919c3a44ee76a5c02f9698d7532c7b31b7ba11b67922712051be6c69a4ffd82bde7ec8de233d797bd07f366bdc82b58d75e61d705390c521e2c6a4aa47cb2a8c2cea71dc4dc57c0bf87de434295533635b224d9ee895f5d1d916cd4f286a025756397b6500a30f9c84d026be7257bd6d6881297200c30969b12c3b3f9c21c536ced71be11b1424dc864ac36d4085802866aadcc432e7fb5bd357e72a4e792fb5e09d273f195aefd43eb11b7c4efa97139fde6a39d240b13f4aecde05c114fd2541a0e188dcbca40501ee9a86dc63573b5710d1582610f703b8e2e947e6bb8d6fa0a61ef403d307a6a9030b82312c23fc137f612290d4f4e85612246e5eacece2f950fdcefc03819f77fb5e6704c3ed7034586f2aa2df593046c49c3a7e18a7b8d9143c9755d25536817e9146be9d579f993ccfeeeb7b482cb2fd5a6f51dc5f09e5c4e2d4071ed8062b553747b4cf616a78d6d8e4eaf191ca086617da0606d88f22380f550383bfdc6ba0d57164ee173181a3a4b1c59ddcda2491242a0e19a1dafd4281c91bc91e88f61f535295c4982ad83a30b25a975d5f33a9f1e97dde6628df95f825d35e0ffec179670098557f61527f08bdf2e1d3b2cac3f94dddfb9e426530442a201b4c4d2c82416d39d7e70d45279c318123f7e2a2fcd81a2d9e6c575b056c8a03c27e628851e762232c8efa55c7efd62300eb2bed13352cf3d1ed881b741b216af6ec6427ec25a290b671fc4af93916bb903753c5881301b3cfcf372302754146e23b1e2bd1d52cdcb455250dd0e750623a49526a14cedaea5f77a4d5fa69b217089c87592cc2d099b6d577646515cb7a3fd49a639d8decd8bb4cf306b31bb75b80c1b160914d6af67138903933ee788784a4019ad81a8a614d19e5a04a81d7ef4f09bd595b0d00acb3a727c10ac2e569e0eb015faac9ab2db040b5154a067e87c6a345dd17ee2b4ea131b14b1d34d0bbc92fe9059ec89f6aaaacd5aadde40961027e5892e1827ba58b6906c38ea244ed3974fd7957b1ed8eff1eb5d45118b755b5f07e3d765a18afadb6c30237c99f71ff1e51ba6f7c35db42d27f977cf6f92112e519dcf88f74279ae58d5685bdfd621c36275105f1f6b79debc39d2c8215d35fa53942500eff750b0b1657f46aab623df5f4011529bbd86a23f5db2cc4eb2369d0f25575970ff70e4b9b14471d0a870be0e2a97d9b218d8699ded8622401cf0bcf5c85c1f492b0b63b814b65ddce96b4c118860ccbcb839e3a11b475db345aecbb35802c2ed917c8eca32260297d43276bccaaa3ca5edcfbcd8cfca3eec9f431f7165696f27e6a8f2ac99bee2ef1701980abbbe4e1e432273053e94a7248546ba59b99eb002d7d71dc2e794f8fa9a74ddca2e9c70b8095576666595557ce0e0bc27b1cccaa47a22719e6e01513634ea31524282f6fc7e705c68668fa5daced71fdefcb2170148b5ab434fe903ae9db04d5afedd6466d7fc5dd5acd9abfde08be6952b9a2732bde9e9b20fb396e1339cb4248361a7a3c8dd162562bb48e6e6de0a07e45e8774ce8676479cdbaf2f7fc1e85ce058aa29ad1e496570f3f6887f1637018dedf103be80f72d4d81178dfa2065f94d4a8c3b8627ffd5e93c0b724b0d1d2ecfa5b29a87fd8c347f29bc63d7ea43f254a4ef709289f6db2ad9c123075efbeb4f97d846405b27321f2026f6909d8cc5aa3e473cb29b782317ca7958a7241daf13cf95fe8656ac77997d7c309cd087d4073a465717a97678c690b277ee8b0fb260de6c7a8443c8f27711c3ab1bef90d2215d667d807f2ec2f20e6939b39e1e8f24c065abe7928c711a39ddb19761d6b037e93c0eabf28205f12d2999bec595d68916051fbe8e8cca0e96fdfad178dabd2ba6b80021aed447f7203e0b3d93a397fbe803319da4494648de553f06d8c326addb21e429fcad6fbf6b4a4241ad12862c694feca25c761ececbd2cdaa4379ad12ec0c5d7d9c3c310016a374c3f474fa1e4e3a838b36d964542fe6c1962a6c5d3f214170202a3de9e64c776f9974f9694aad14efe17642a8209ca96a94c66d26832949f11faaf815b8416143e64d925521ca88734815538dda75a762c4f335a50fe08c4d3869f8c7bef631c1df6884dfd7ca28d7d3a573a99ec82786a96547da5c9c845a4a401b97bdb6fd62ee3a60f63b90854d25722bc780d5fd803b4ca9da4e73dfa8cd5a97cb06c25d63f851bb8f4ee7ec13e6c8b46a9ae927c40e9b8fc373f9cf0e7435f5f1606413ddda8e9f8b89f54b3223934c4348485773f66fe5e51af2e581a2fa0dafd6eeb8241625b6c0d8c5dd6999d440fc58c219e8f28e08106390cf27e8003222f779c9b35890d9a4473a1ec947664e4be596f7d6107718f75bc5f10360a25b3b1f9d15cda0a03250bcc79510f79671d9c4967cf73081d1dac1f4d7c20d2adcb39c16242981cbc8fa13752d087117d74596d0cf5b634c46dfa0ad050e9b47ea3dc9e5e7f36fe122044bc27b144bc49d78f17a5908ac235ad884c73bbb61ca819e8260eb2fe4a551977135e3c4b572733ab7e4ac8e007bff0b3583cd37e89e964392fa2ea5a558fbbdaae37165ff7ad1314882f2f9348026c3ca953e03bc5d407bfb4c60164f1d4eefa2df7353513c276c02230f2ecc6b60c1e9f073cbb152553f51b2820a1214fe0aa67f9dcd132e6c28e8b39f4f85edd6eea915d3885c1cd9312a825cd7ad8765912768af8eb574cb40b9f5749b2b334d044aff3a40771bae466c23a13569b40f14e05ef78fa7a9e8a41a74dc1ca663c6e02cddacbe0da50630450fd8bda54307fd4311e17a1e8349ab7e6fe4ce6cfa79dae720d2aaa4ae49d75b3944924fd746642dda31914474ac3f6cb0a77e1ddc3f62268d329b3e89ad84c469eaf37da58ca48699b61d31a373a13a2cca7ff552cbd4c0bb26026fad872c7c182792db92d020d6bdf6164d3c2b70b93a5df299dafe0a9d3631aacef74290287a44d261b860fd8ef26c12a83006df4322d30a7c97f8ab8c2639be946dd3e4220086fe682d629c526e3d993edd1ad6154f32bd57bbef4c7d85276b27abfa72ea461698a1417c24d59528b9511087741b51466a733d4bd98bf77724c3aa662ba4ccd34e29cbbed6fa96325ed3c45ff78fc39797a44f992907c5e0998ab559bf92d298f3425c249fa50a4746934da25ef25ef8cb4cae546b8d1339c97a50a6402548223c5f459ec01505e91911f2fa2e6e5310550a68cfa22a1fdd9133a0b0cbdc827d471e502dfb29bb9e2a32af63721a41601b754e804e995d5bc3470e560fb75f554b4bbe4cdf4aedc3971946f31dfc4c738bdf217170cedbcc915d387af456a12dcdd4bcdf4acd184a7d6e6c70330b8282f1f5bc90e4c4c9adcedd2ace89402f52b7b0cd2e69e06febef3007a88bc9cf8e86796839971f20a62637d421acd143f4d816527899", 0xed7}], 0x4}, 0x0) 21:42:24 executing program 4: perf_event_open$cgroup(&(0x7f0000002c80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x10061) [ 1119.358319][T13859] loop5: detected capacity change from 0 to 4 [ 1119.376239][T13859] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.388663][T13859] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000002c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 21:42:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xc0}, 0x14}}, 0x0) [ 1119.469019][T13859] loop5: detected capacity change from 0 to 4 [ 1119.477490][T13859] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.490934][T13859] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:24 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x40000000}}], 0x300, 0x0, 0x0) 21:42:24 executing program 3: pipe(&(0x7f0000000640)={0xffffffffffffffff}) connect(r0, 0x0, 0x0) 21:42:24 executing program 1: pipe(&(0x7f0000000640)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 21:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:42:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8981, 0x0) 21:42:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000e00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:24 executing program 2: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) [ 1119.660463][T13895] loop5: detected capacity change from 0 to 4 21:42:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:42:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1119.715230][T13895] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.727385][T13895] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000540)) 21:42:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x40049409, &(0x7f0000000540)) 21:42:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:42:25 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xc4653600}}], 0x300, 0x0, 0x0) 21:42:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 21:42:25 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x38) 21:42:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:42:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000f00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:25 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8902, &(0x7f0000000000)) [ 1119.839460][T13895] loop5: detected capacity change from 0 to 4 [ 1119.846657][T13895] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1119.858821][T13895] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:25 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x890d, 0x0) 21:42:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote, @dev, @mcast2, 0x0, 0x100}) 21:42:25 executing program 1: socketpair(0x1, 0x0, 0x7, &(0x7f0000000080)) 21:42:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000001}) [ 1119.941280][T13935] loop5: detected capacity change from 0 to 4 21:42:25 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1120.025621][T13935] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1120.037988][T13935] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8936, &(0x7f0000000540)) 21:42:25 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xe0ffffff}}], 0x300, 0x0, 0x0) 21:42:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x80108906, 0x0) 21:42:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x55) 21:42:25 executing program 2: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1120.222246][T13935] loop5: detected capacity change from 0 to 4 [ 1120.238417][T13935] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1120.250662][T13935] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x2}, 0x0) 21:42:25 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8902, &(0x7f0000000000)) 21:42:25 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 21:42:25 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8941, 0x0) 21:42:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, r1, 0x201, 0x0, 0x0, {0x3}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x0) 21:42:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000540)) [ 1120.383775][T13987] loop5: detected capacity change from 0 to 4 [ 1120.419851][T13987] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:25 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8914, &(0x7f0000000000)) 21:42:25 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfc000000}}], 0x300, 0x0, 0x0) 21:42:25 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8906, 0x0) [ 1120.432057][T13987] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:25 executing program 4: r0 = socket(0x1, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 21:42:25 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8915, &(0x7f0000000000)) [ 1120.527194][T13987] loop5: detected capacity change from 0 to 4 [ 1120.553266][T13987] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1120.565546][T13987] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001100ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:25 executing program 3: r0 = socket(0xa, 0x2, 0x0) write$nbd(r0, 0x0, 0x0) 21:42:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x7fffdf005000, 0x0, 0x11, r0, 0x0) 21:42:25 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8982, 0x0) 21:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 21:42:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x7}, 0xb, &(0x7f0000000280)={0x0}}, 0x0) 21:42:26 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfe80ffff}}], 0x300, 0x0, 0x0) 21:42:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000000c0)={0x0, 0x41, &(0x7f0000000080)={0x0, 0xfefe}}, 0x0) 21:42:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) 21:42:26 executing program 4: socketpair(0x28, 0x0, 0xdbc, &(0x7f0000000080)) 21:42:26 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8982, &(0x7f0000000000)) 21:42:26 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) [ 1120.720678][T14046] loop5: detected capacity change from 0 to 4 [ 1120.731700][T14046] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1120.743754][T14046] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001200ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x890b, &(0x7f0000000540)) 21:42:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x201, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 21:42:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:42:26 executing program 2: socketpair(0x26, 0x5, 0xb6, &(0x7f0000000240)) 21:42:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x894c, 0x0) [ 1120.795164][T14046] loop5: detected capacity change from 0 to 4 [ 1120.802359][T14046] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1120.814523][T14046] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1120.903702][T14074] loop5: detected capacity change from 0 to 4 [ 1120.912648][T14074] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1120.924690][T14074] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:26 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfec0ffff}}], 0x300, 0x0, 0x0) 21:42:26 executing program 1: pipe(&(0x7f0000000640)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc01047d0, 0x0) 21:42:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x4020940d, &(0x7f0000000540)) 21:42:26 executing program 2: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x0) 21:42:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001400ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 21:42:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0xafb, 0xe) 21:42:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) [ 1121.048674][T14101] loop5: detected capacity change from 0 to 4 [ 1121.063255][T14101] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1121.075317][T14101] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001900ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1121.208732][T14122] loop5: detected capacity change from 0 to 4 [ 1121.218522][T14122] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1121.230572][T14122] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1121.306249][T14122] loop5: detected capacity change from 0 to 4 [ 1121.314251][T14122] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1121.326542][T14122] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x300}, 0x0) 21:42:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 21:42:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 21:42:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x80108906, 0x0) 21:42:27 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xff000000}}], 0x300, 0x0, 0x0) 21:42:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:27 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x80108906, 0x0) 21:42:27 executing program 1: socketpair(0x0, 0x0, 0x2, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 21:42:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="fb"], 0x38}}, 0x0) 21:42:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8916, &(0x7f0000000540)) [ 1121.809376][T14144] loop5: detected capacity change from 0 to 4 [ 1121.828653][T14144] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1121.840708][T14144] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:27 executing program 3: r0 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 21:42:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 21:42:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) 21:42:27 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8912, &(0x7f0000000000)) [ 1121.921347][T14166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14166 comm=syz-executor.3 21:42:27 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 21:42:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}, 0x7}, 0x0) [ 1122.005395][T14144] loop5: detected capacity change from 0 to 4 [ 1122.032986][T14144] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.045418][T14144] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:27 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffff0000}}], 0x300, 0x0, 0x0) 21:42:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x201, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 21:42:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x6, 0x4) 21:42:27 executing program 2: r0 = socket(0xa, 0x2, 0x0) write$nbd(r0, 0x0, 0xf0ffffff7f0000) 21:42:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 21:42:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002200ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000540)=[{r0}], 0x1, 0x0) 21:42:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@hci, 0x80) 21:42:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000004000000000600000014000008"], 0x28}}, 0x0) 21:42:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 21:42:27 executing program 1: socketpair(0x1, 0x80005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 21:42:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000540)=[{r0, 0x2700}], 0x1, 0x1f6d) [ 1122.294284][T14215] loop5: detected capacity change from 0 to 4 [ 1122.328932][T14215] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.341126][T14215] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1122.403305][T14215] loop5: detected capacity change from 0 to 4 [ 1122.420058][T14215] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.432123][T14215] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:27 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffff80fe}}], 0x300, 0x0, 0x0) 21:42:27 executing program 4: socketpair(0x0, 0x8000d, 0x0, &(0x7f0000000000)) 21:42:27 executing program 3: socketpair(0x0, 0x2ca12927ed0f62ed, 0x0, 0x0) 21:42:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x201}, 0x14}}, 0x0) 21:42:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000002c0), 0x10) 21:42:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002500ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000140)=ANY=[], 0x2e) 21:42:27 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xafa, 0x4) [ 1122.554381][T14248] loop5: detected capacity change from 0 to 4 [ 1122.583204][T14248] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe8872873a5c27e90, r0, 0x0) 21:42:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x7}, 0xc, &(0x7f0000000280)={0x0, 0xffffff7f}}, 0x0) 21:42:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8940, 0x0) [ 1122.595617][T14248] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:27 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8948, &(0x7f0000000000)) [ 1122.689660][T14248] loop5: detected capacity change from 0 to 4 [ 1122.697704][T14248] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.709754][T14248] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:28 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffffc0fe}}], 0x300, 0x0, 0x0) 21:42:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040001) 21:42:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xef) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 21:42:28 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8946, &(0x7f0000000000)) 21:42:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002700ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x14}}, @rthdr_2292={{0x18}}], 0x30}}], 0x1, 0x0) 21:42:28 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 21:42:28 executing program 4: write$nbd(0xffffffffffffffff, 0x0, 0x67) 21:42:28 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40049409, 0x0) [ 1122.872772][T14291] loop5: detected capacity change from 0 to 4 [ 1122.895192][T14291] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.907249][T14291] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 21:42:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002e00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) [ 1123.032966][T14317] loop5: detected capacity change from 0 to 4 [ 1123.042957][T14317] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1123.055462][T14317] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:28 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffffffe0}}], 0x300, 0x0, 0x0) 21:42:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0}, 0x20) 21:42:28 executing program 4: socketpair(0x28, 0x0, 0x7, &(0x7f0000000400)) 21:42:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x0) 21:42:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0xc}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x53, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x38}}, 0x0) 21:42:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004500ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, 0x0, 0x0) [ 1123.187987][T14339] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1123.196134][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1123.206878][T14337] loop5: detected capacity change from 0 to 4 21:42:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x890c, &(0x7f0000000540)) 21:42:28 executing program 2: pipe(&(0x7f0000000180)) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5421, &(0x7f0000000000)) 21:42:28 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8927, &(0x7f0000000000)) [ 1123.234061][T14337] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1123.246144][T14337] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1123.266466][T14351] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1123.275034][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:42:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) 21:42:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x14}}, @rthdr_2292={{0x18}}], 0x30}}], 0x1, 0x0) [ 1123.360714][T14337] loop5: detected capacity change from 0 to 4 [ 1123.369725][T14337] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1123.382350][T14337] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:28 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffff00000000}}], 0x300, 0x0, 0x0) 21:42:28 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc0045878, 0x0) 21:42:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 21:42:28 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x67, &(0x7f0000000040)=0xffff0000, 0x4) 21:42:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004800ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300}, 0x0) 21:42:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x53, 0x4, [0x7fff, 0x7, 0x0, 0x0]}]}, 0x38}}, 0x0) [ 1123.543541][T14387] loop5: detected capacity change from 0 to 4 [ 1123.558359][T14387] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1123.570533][T14387] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:28 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) 21:42:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x201, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) 21:42:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x7c, r1, 0x201, 0x0, 0x0, {0x3}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xffffffa5, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x7c}}, 0x0) 21:42:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c004c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1123.607110][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1123.617736][T14400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:42:28 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0xad0}}, 0x0) [ 1123.684890][T14411] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1123.708313][T14413] loop5: detected capacity change from 0 to 4 [ 1123.717977][T14413] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1123.730152][T14413] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1123.752179][T14419] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 21:42:29 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x300, 0x0, 0x0) 21:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x68}]}, 0x1c}}, 0x0) 21:42:29 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 21:42:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) write$nbd(r0, &(0x7f0000000040), 0x10) 21:42:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 1123.799341][T14413] loop5: detected capacity change from 0 to 4 [ 1123.811918][T14413] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1123.824014][T14413] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:29 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b80)={&(0x7f0000000000), 0xc, &(0x7f0000000b40)={0x0, 0xad0}}, 0x0) 21:42:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c006000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:29 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8934, &(0x7f0000000000)) 21:42:29 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x10e, 0x0, 0x0, 0x0) 21:42:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 21:42:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc0189436, 0x0) 21:42:29 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40049409, &(0x7f0000000000)) [ 1123.989822][T14448] loop5: detected capacity change from 0 to 4 [ 1124.009779][T14448] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.022316][T14448] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1124.073740][T14448] loop5: detected capacity change from 0 to 4 [ 1124.095012][T14448] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.107066][T14448] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:29 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x20000000000000}}], 0x300, 0x0, 0x0) 21:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x20000254}}, 0x0) 21:42:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0xf75d334b8db494cb, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 21:42:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8918, &(0x7f0000000540)) 21:42:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x200001cc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 21:42:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c006800ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 21:42:29 executing program 1: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) [ 1124.267719][T14487] loop5: detected capacity change from 0 to 4 [ 1124.283069][T14487] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.295127][T14487] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x7c, r1, 0x201, 0x0, 0x0, {0x3}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xffffffa5, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x7c}}, 0x0) 21:42:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c006c00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1124.348257][T14487] loop5: detected capacity change from 0 to 4 [ 1124.355528][T14487] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.368315][T14487] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 1124.394498][T14509] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1124.444491][T14510] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1124.485994][T14519] loop5: detected capacity change from 0 to 4 [ 1124.502051][T14519] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.514215][T14519] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:29 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x3665c4ffffffff}}], 0x300, 0x0, 0x0) 21:42:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000040)) 21:42:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000540)) 21:42:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x7, 0x4) 21:42:29 executing program 4: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000004b80)={'#! ', './file0', [], 0xa, "3541ea63ccb2b681ffe9637cd26f4405707f17ad77bf35414b30822d41e769a39600715f0f67a29b07f7d4a6159c2bd758e0b7c14cff64b9b0ac76e8cfda19af40f1decf93fbf34cd10aab2512ba682c79aa3248e7e704783ab9cff49628dad90f595da1367867edcaa845c6fe166e341b4da16515486d4689770cf93ba4fc235e39d235ef5a32096d8a0293aa315fcc69c8acfbff4c87faa5c89dd02d375fe6e28dbb607fc3cb26d36ba8aea41a41b88575e1bf663dac49a13f68206aa06ae91b1135f0476fa1dd6a141dc8946481a0fa0d8492d620eff4f4604ba3ae576719644535ae2fc32d5136d114e2adfcb1e9d5f54a43f701b9e483e232a7a8ae8baf31108cfbdbfc33f4ebe183ee1fd76588ad87b620bd3c317bcb203872da19b4de5849d06d73ddd92392c75e83b6810f713e9c0d59353669f10b7d825f2d091edd3acbaa677e49a5250c97a9733874edcabbb010be6e8bd4f52e713902816b9c8f9e60d741c3d96c4db55419862a0490eb3753d53997c16fd9357ee001fad709815ac0ac08d022523d0a09eed48ebd3ff581384b5b5d7848e869915fc6407b7a65e2de0103a7ed7ddea5956065ea725ac7e97d7367be9f5824489b5bc1b53660830b369f998564f55cdf7dfa2322d8fc0d92fc01d921e8fa9038c37eb98e6fa4fde2a528d5a346eabe0ef56c9de7ab1c441e5056e4dd7a5bd8426020283bc7d55b1602d67e76da58f43e96f326d654eb6855deeaf1ad4fee21dd1ae0d248f37431251627d2fc5ab54d5bc20c25b5ea799feaa5ba7a57a6c6ee42a4c393d81deb80352b99f5315f7f9b4fcaaabd8d9e273d4d1c68bdafec1638205a7cddfcd62e220ca613dd70240cd4de92ed0b71c6700d0fb60e4f00f81bb87d38825b6d93a727eca8b3e5a13a5c76d10a24f59d25ae62621281f90735db02ea81f1beaea86d80e75f07df5750c519f214b77181a9a8f30f1526e9eaab66b798748af78dc54b6a21471fa9e0268c22cc8d625ad8246b7bd1ad9bb5e2f3aa7ed3eb7736c81ffc5a476431f13454f2671a3b5729eaee3c0dc68ea027212b409086abc59ad54792ffd2d9b0d5a7a8a12f44ea0ec4427c7f5bd1f7c23cbc2224fa33a7b75ec6403d06798acf31614e2c5935fbe37437c9936e3fa9a9fdf2eb4ea9ada665ba7d1d04dee41f54ea3e84f7fcc0578671908a06c1767f6e91f7eb43037d8272536c194e584dd91743bae3e00219a3499bb5615fdbaac2c6d119a2a0d8f41704c72525a4c956df23812cd91cad7fdcbc39dc7d04e5c3fa02e81b0a2c67f3536952febc02e92d0c790042ac5be89a93f42a339b732831f71e766a2b46f48b2b1638dc1e394654e756eac357f81b0cb2fab5fb1eb182bef681b66a4f00c1a0ad8f5c31e2a6c63c7db56cd73430b588c2bf06f408147d9292c08f6a7d3c5bf9790197a564531eebc89147149e0ae526e710b00c2f0e7c7d45406f75ffcdeaca9facc4fba2008b91709147a1b27f03782ecbda37c34dcf027b64f11a5bde641db4b471e4dbc77614677f4d44dda95d9e1a444d669961222e3b0431659a5d395ce07fc13865e51cc34cfee56b50df829971a848a75781a33737cbc492a904bd1cfa76918f299284f2d195c32bcfeffb9a013db9b29fc48e6f115a7b27f2c85f51436f9456c8fd3a115def34489ba57b319e11f7f025f9500695ca28ec59e47b431671f00161be80ce44d48f9b76ff2586793788fe4d2b49fd623657e3de1076538f0d6848a2459d2b71db22f1c7c6d1cbc5a22d81e04408d8bd76bca2b3371b367a806eaf6189fcdd9a7117e02f962e6fb0ea83414d58633312b27cf27a56a25ab1de9e76589a2fc39cee2095012199782df984e8661ed1382d25743b4b3052efef6594f9331d9534346c99450cc3f89f74dd9e6021e88e04b48ea078846d300864b41994f89933fcde11abda06c9a1246aa5c23eb7c1b6148689ba08904b132a51cf6f88e55dfa2e07692c13be033ab8006fad5a2398d22e9bcf88ae7a799da200bbbad7b77da9aec3fc99001fee88b6d8b4001e5c8973b980eee71f8c9e23fda3f17d103f7e472a1dd8840ccc5bfe1f8cb22652603c68439515ee313b4ef43c8b415caea316822920e46331ff8c8f520fc8eae54d8809972e5af62c1d2fba243517a1e984ca711451bdb969fd9bd1af2ba4b30a228abaf3fb11db422624215986e9c7a17b94ac4a8afc75d4eb9663555466dabc27db58264453597095c2c24607892b668e2c5a4eed9afca86c01b915aff6599d0eb1b027f4c4d6168167bd72a10c8302b440d45696fca33f836a94171915c149a37416783d4e86aba7f09441d02fa0653e425327a6cd2a6c8793c342f52c0632d6b5607693f88387f22321ee6d7154882299ac39ade8136558d718b7e64e215338daabe4b2f461335d584b68369aec6504794dc0b8655a37fe0e3894a6ec99d491e2b67ef5e26b2e108a77f8951d4150e5e42e3ad85941bd2137e9f57945f3fb73328593839b0c55f95eded3c2a41eb3e38899668762a391d2996159352c08c7e3d5d007de7aaa124e78dee7201ca514c8a359ffc88bac52424baa9a910fe815cdc4910f81e1df54e461eaf262bdaf7d02c506ca0167442137668e88e9340b0bab960418c5aa3cafdf873733961da5bb260a8f4b980ba406adb0d66d5d254ed05a1873e60813ef1e9625c445f6b78b19e4d337b2675ee387cd4069c13a55170683107b804c1a09769dda82b3a78a253a506be994e32c3e904bebc395cc0bd27571b09d60c84e6198d388e07c6b00e21aed6cd68af55ece67fcff7cb60ef8d9a426bb8dd349726eea831239896415747e318c10bee821f62a314a437768427864e8b712ca096007bc37bed9eab1331cab781de148901d9c2b448115b787c2c37b3d56411a546e812f2ff696054ab33c47462affeddf6386766d4c986a99476e065131e6ef15b6bce7a0378736dbedbd8c2b4feeb1f3e412dfe074b3fabb4da2fd050b5d3525f7936150f18bc3a08b1e8fd51caa56d67f13394bb13663d74927c846e1fe8b5c744eca2acf0a5d5724c6c9650762fee27ee8dab5fa7a19acd074b3f43cf97c05c1ce79499087704a65bca532de5f681a49c3757756f031a9002734ec0192dd58ba43c0f7085d65a2500e86b54507345d6c8de40368a0fa922d49858e03e513d87b09755890404ce5ae5e18e67ae234a173dff57d46542eb66a474a339202a3b76ca9e84d5239b0e9bccb9afd94f1c0b21dc660944f75bf38d28755852402943df150f9838fea4c517327c7f58a16fa80afa6803e678a3cf1e387cd29fda9f5d04b919701e5452d88db9753eb7f6bbe485674de1f8a2c017bcfe931beb1e3724d003a0b3dbf47759eda0086859f72e497c88966fab14ac1efa8530164a52388d0809161b22998567f7d5ef06ba0e0c61608c69116d56a9b6c3f3a938ef617e4dfc2d2cc3b9fecddd65b4d7678fb06fae349e205e0d81870a55571673b37f7241357f9a3fcaf89864f4ebc4e3e7b4c2be9fdc0f070ce76ba8af021699e292b10484c8a230ac7ad97b11d462d59c6b54d71bc03d7b6c2527aa2fcb4e22861fa2f4eaae97dd000fafbb9dba598b51c27e6d0f5fcf4d311e806bcbc323c4a9bf5ba0e14b59ae974cce1bf1bed74c15baef8f30c594df90046f8442b184e82835e606dee99299277f1ef516561b95a3abb9117c675c3e2455dad70003f7f0bfd4a741f5013ac9cf875dd34977a624fa0fa738fe92b7f8d5376ce3862563ddcc7b9c65319f7b85c91b695742bf0992b649303ec57f7ffae4b94329eee84b022518ff57dd2f067c89d0b46892acc65e27ca80bc9f2a1b341ef9aa82b79585382d5302cf277ab32f76b9bb8fcc3e54784e68dcda426904454321261d07717022f3c06a99f38c7ebc07a2ccddf51b9867001270e8e30263f1d85e15a6826d03a6a5243bb0e40354d673e329ce05ea1e7c087ca1578111f61d3c031a3fce010919948fa80a013b6f4fd30768a56ca43e88252cf52269bf9b8028a6f5e0e09a17c77a76f8674fc82b2dd394d2ba6a343fec965b700d34ce41770e7a6a75a99b0954b5cde73fdc0aec3161bf647693b9a3c14fcbefc91e6b0a7fb12b8adb0bcec008751343764dfe3af0f789fc84260294bc8f3c13a76fa9a3520e7cea779fbf91a97d45a644f7deef9e5f3781c0d35426f2f8d10d84cf2b10ff1f59f8615725b8b16c6eef60b04fdde72896539822cffdef2f4bac8f47bdda6e4422c8b614fc44aeda76f5e4e3588436eed8992df2f6782a20f031cb166c9ddc02a16980d19e4487c87e607d060fd62df0a63b8b6b59d4935714d2705f14616257faed7f252c5dd1fb8acdd6c71b41c105d4681f2b92e4e0de673e47d610426c373ea017b7733e211ae62179fb1bf0380b021217b5437fa422df4e14377d4397430b4ef275b856b60c39406aabdcab4176ae25f83ff3265b17343ae69fab582d4ff22b2049c78e5d709b7cc114780991cc8f478c89e30ae5c35492743bd2cddaf5570e4f35aafaccf27542e280f242dac12d6200ddbb553545366712ac441d03e43a0e91c4db54d6d7a022f285f9e4d0866d3d31e90d5aa2b10397de036838b32e8589d9bd96adca5acbb0ee2ec343a389ad8a0b752e9efaf81ab5bb64535368e0320278063df8ad3320580efa2cd917bcc709fc2da7fc7c42592b0f971133e5179b38f320f091f1f669d3f9eb1243d81c138ab9ad89949c3ad865004fdb6094e23bf17f809bc5d8b138f131c454cc4a1ef41ca5235fda4e339bcf048c6f1dd89620a89474c8fa14c86e9032179c43b77a6cd954dc94246f32bd90c18ca1e9d74490edf409391cbaeacf3e3c21feeb3b24b8a797c4784fa37a75cdd680a0083238b2602816a1aa855cbbcbe24c6700a16fc801787365978118627277b0c26941453ba30babd7001b033c66332d98857ec348a0a24b789c94a2b779416d9079a60c014838f0a915cfc60489e5dc4e59303d1b19afdc42533d066e731097d2155220642519cb16c80c409e5fad8a53e1a29071f2d5dc2d20f17e30a5172a1b1bf861a5286121d65968db31b9eb4f75086c8b6b236bb31edfc13da2f91bb7c570880ae4c9afa5e2287f1330cd4868c4124f6d8b59e46608c5e6d8e30417ae5230deeb7874fe3367d7a2cca408c514529d0e8ec1ac03fe496c5129aadeff4678fe9bb267ebfe712a761fe9f09457ecce62efbbbca01986fe29eb121907044c746b1269d4c05f0b02995a899bffc8f270e803345aca257b8645dd64aacff35f8ffe43acaeba8720ca2ba3ba58cd2e545c03dfff7b23d30ec232274f3e12f5ee75b5d570ee78fa69d9c61d301f788db977323625438dd21c0b9ed9246888c5c89a194e874b6a4f5ac71f45a24940f402daace67f8264f2c5204c1d42a7b0fbf1a757d5ecaf03c7a121040891a1333b111eeba2659ee7016e7c890a7c730fbd43882826e20544d0f260e92a9cee8117defb790a3584f04ece34ed2089c8ec21abbc2cf2716ff360225ea5f91720f20e348779ed95f57492962fe429fbf7a39fe65847a4a9c7c4ccf4804b52bb0d94ca019a511abf4d11998815c6b0f85ef0d4234d53552bad2c30b54cd6db14135acb5918ce7a168679e3aee540dcf658a08c2800598e33dcef4efe75ab1e3c04dce79f934768b07603871b55395e514b2a49c03e335870ed6f2d1c1b7d1ce67d7a44e4c9a0da9e18864d62b98d4092fdf5f93dc1a96af8957ba473c690eb84e04ac52cc94b790"}, 0x1001) [ 1124.553004][T14519] loop5: detected capacity change from 0 to 4 [ 1124.560020][T14519] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.572090][T14519] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c007400ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x7}, 0xc, &(0x7f0000000280)={0x0, 0xf0ff7f00000000}}, 0x0) 21:42:29 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040), 0x10) 21:42:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x53, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x38}}, 0x0) 21:42:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) [ 1124.703500][T14548] loop5: detected capacity change from 0 to 4 [ 1124.713568][T14548] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.725781][T14548] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c007a00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) [ 1124.749607][T14557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1124.812247][T14563] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1124.826380][T14568] loop5: detected capacity change from 0 to 4 [ 1124.845427][T14568] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.857992][T14568] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x300, 0x0, 0x0) 21:42:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x53, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x38}}, 0x0) 21:42:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 21:42:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) 21:42:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$nbd(r0, 0x0, 0xfffffe80) [ 1124.903163][T14568] loop5: detected capacity change from 0 to 4 [ 1124.923357][T14568] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1124.935604][T14568] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r1, 0x201, 0x0, 0x0, {0x3}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6800}]}]}, 0x20}}, 0x0) 21:42:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000402ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0xe) 21:42:30 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040), 0x4) [ 1125.010600][T14588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:42:30 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5421, &(0x7f0000000000)) 21:42:30 executing program 2: r0 = socket(0x11, 0x2, 0x0) write$nbd(r0, 0x0, 0x0) 21:42:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000004000000000600000014"], 0x28}}, 0x0) [ 1125.072369][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1125.075236][T14596] loop5: detected capacity change from 0 to 4 [ 1125.169574][T14596] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1125.181690][T14596] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x300, 0x0, 0x0) 21:42:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc01047d0, 0x0) 21:42:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}, 0x300}, 0x0) 21:42:30 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 21:42:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0) 21:42:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000003ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1125.243874][T14596] loop5: detected capacity change from 0 to 4 [ 1125.253725][T14596] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1125.265883][T14596] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8901, &(0x7f0000000000)) 21:42:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'gretap0\x00', @ifru_addrs=@rc}) 21:42:30 executing program 4: socketpair(0x2, 0x0, 0x10001, &(0x7f0000000100)) 21:42:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000204ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:30 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1125.360263][T14638] loop5: detected capacity change from 0 to 4 [ 1125.387995][T14638] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1125.400940][T14638] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 4: syz_genetlink_get_family_id$tipc2(0xffffffffffffffff, 0xffffffffffffffff) [ 1125.503081][T14657] loop5: detected capacity change from 0 to 4 [ 1125.529699][T14657] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1125.543975][T14657] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:30 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x700000000000000}}], 0x300, 0x0, 0x0) 21:42:30 executing program 3: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 21:42:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) 21:42:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@private1, 0x7e, r1}) [ 1125.641744][T14657] loop5: detected capacity change from 0 to 4 [ 1125.658624][T14657] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1125.670684][T14657] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8983, &(0x7f0000000540)) 21:42:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5460, 0x0) 21:42:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 21:42:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000604ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:31 executing program 4: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc5792197bd71e02d) 21:42:31 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x1000000000000000}}], 0x300, 0x0, 0x0) 21:42:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x25) 21:42:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, 0xfffffffffffffffd, 0x0) 21:42:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x1, @empty}, 0x80) [ 1126.265180][T14703] loop5: detected capacity change from 0 to 4 [ 1126.302174][T14703] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:31 executing program 1: mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) 21:42:31 executing program 2: get_mempolicy(&(0x7f0000000380), &(0x7f00000003c0), 0x7d018fa6, &(0x7f0000ffc000/0x2000)=nil, 0x2) 21:42:31 executing program 3: rt_sigaction(0x21, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000480)) [ 1126.314676][T14703] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001004ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:31 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/244) 21:42:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c, &(0x7f0000002540)=[{&(0x7f00000000c0)="363d956367108770f10f7b030774b789f81fa442144cf7088e308eae2b82535792e6443ce081570aef9c2621394a0cec9e9cb232325c8dd999060d9eedb26a1405a05a93ab0fb7352d6d30d8fb058702be51662073f4345641cddee29a07506084746a948c0fd68f7156f6edd490aad8b9276d2b12bc12a314bb2aed9dfc20bd59acdf2125ab9212271ad99c17b6a62724c79e2e5f265760bf5539680362df481c067fb27abb90a780c5aa672728a7ed5ea55ce606ade3d808ad71f3f56d826c5a6eb76eced5fa199c4bfe806453821c1a3e1a3900b193eee621c0c409beb1f2bb519d570b3a85b12b0f4325e5a098e2cc3ef425ae7c09433774f08c07481fcd274249ba176273507b12627091daad33517dc385fff4685a3801a8263f4cd2a388a92a0b5bf4f4303a1ba9c124141d7f5442e550dbd7319d770ac018797328bb63bdf0658f5379ef87756803cf372c3b9d974dfa3ff827c2543860b46c6b8455ba7ff650aa79b2ebcf8ba802b01d02e2523837bdf776d2f391599ec57664b62eb3929921afc4eefc337ffeb8463eab579eb144123ce257acc0be296b766246b97e27db7aab9ea96233d2b58518376ce3f97f83d7dace65f0aaf77464800e39fb8c39267bfdf80e43300b987550dcb5e822c8de6d472177f72c8d5c149b31567bbb4c80b70b4308b7a0ca944978f6cd2311a6c00cab7def41ffed359e668efcd0d550cc4c70932a9f13f251ce17d91b3ab6d18d332518b0eba1887b93d2bb0ca3ebafff48d9dba9c82f438db38dd766cda5c0bc4fbc54416bad91feb05e0687d929000364873d0a83e3d230a010da4e01b3f5c79eaaaf69831f90bdfe874e79627932fab40ac76819d2cf3c672823f47d745ec10a9da182401c5d39d484047494c89775183e4e81c28fb77ad70f825155ca66c4cc7e3c9d8803411eeb6bb052b0f8f845f021f418841af0972570fd65050ae4474e6fe0f5ea2f12b44f8c6898f15763130fe6b05ed747a0e449f52be6f223f9653938109b22fe5af83671709a0f9501ea0419da349e12052a74ca41597b43597be0dd63a4c80cda3398ac573fe92990583ac73c257007aa555dc60e7c5b753137d3f9536b324d84e5463b994676a96e3f5c081f314d369f08dfe755d727e105e800f96cca90eaef0897713ec9211e4218c88941066c7af0b7e451f7e954171d26b2e0908141f8d45f38e92fa77643fdafde001dffe59682014ed93582cbe03db8faa87221a01a7af67bb3fac67c279f6a1dff91d2bc5cc51f5de9a184c9d7aee750ef70ebf8cd4fd0f44b373db412bbcc5320f82c24fd6c44ee2397ebf04845f385e849b76cbc7aa40390f5531f840035f2c821ccc576d814656d8f4bea2a8f210a86b9a3ef30e6665aaeab599a85bd1b15fd260ccfa2fd133e751dc839c1d91326e67086f45d3c70a0d611fad8a21fd4277f86c5d89bc25f4ccf193b3869ad6832092d2ccf677c0ed56b000a09949cad35cb08969b3ee6f93623f182683f88db877e7f175dda93b3a4113ed0927461bcf44402236a5b7e39808e3f62dac7df4ec3467982065ab08f1e734dc7bea5e46996450b30943349a37711056a5e47d130d4f6b108a16d1116d30ae6d86d7be08591d6523b51e3a82d835219c86b3ce3ee267240fd804e5a767d64717badc9", 0x4a1}], 0x1}}], 0x1, 0x0) 21:42:31 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 21:42:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) [ 1126.453308][T14728] loop5: detected capacity change from 0 to 4 [ 1126.478759][T14728] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1126.490932][T14728] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:31 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x4000000000000000}}], 0x300, 0x0, 0x0) 21:42:31 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flock(r0, 0x8) 21:42:31 executing program 4: rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)) 21:42:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000001440)={0x2, 0x4e21, @dev}, 0x10, &(0x7f0000001600)=[{0x0}, {&(0x7f0000001580)='X', 0x1}], 0x2}, 0x0) 21:42:31 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x410001, 0x0) [ 1126.566895][T14728] loop5: detected capacity change from 0 to 4 [ 1126.573589][T14728] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1126.585712][T14728] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 21:42:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000005ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:32 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 21:42:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0xab) 21:42:32 executing program 4: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 21:42:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000001440)={0x2, 0x4e21, @dev}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 21:42:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1126.764654][T14777] loop5: detected capacity change from 0 to 4 [ 1126.779866][T14777] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1126.792107][T14777] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:32 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x8000000000000000}}], 0x300, 0x0, 0x0) 21:42:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 21:42:32 executing program 2: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:42:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000006ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:32 executing program 4: rt_sigaction(0x21, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000480)) 21:42:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, 0xfffffffffffffffd) 21:42:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="66530700aef9d4952298897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374cbdb38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684", 0x5c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 21:42:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000406ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1126.992528][T14800] loop5: detected capacity change from 0 to 4 [ 1127.011767][T14800] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1127.023950][T14800] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x1000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:42:32 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)) 21:42:32 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000001380), 0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000001400)={'ghash\x00'}}) 21:42:32 executing program 2: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 21:42:32 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xe0ffffff00000000}}], 0x300, 0x0, 0x0) 21:42:32 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffe}) 21:42:32 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x4d40, 0x0) getxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 21:42:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000000007e) 21:42:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000007ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1127.160775][T14829] loop5: detected capacity change from 0 to 4 [ 1127.171989][T14829] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1127.184179][T14829] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:32 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000002180)="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", 0x101, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="4cb1ae88ec87d478027858b3ff34edb9c45e09da", 0x14, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='G', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r1, r0, r2}, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={'hmac(sha256)\x00'}}) 21:42:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x0) 21:42:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) [ 1127.281893][T14846] loop5: detected capacity change from 0 to 4 [ 1127.291806][T14846] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1127.303967][T14846] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1127.357504][T14846] loop5: detected capacity change from 0 to 4 [ 1127.368266][T14846] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1127.380333][T14846] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:33 executing program 3: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x0, {0x0, 0x2}}, 0x14) r0 = socket(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890b, &(0x7f0000000000)) 21:42:33 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000180), &(0x7f00000001c0)=""/157, 0x9d, &(0x7f0000000300)={&(0x7f0000000280)={'hmac(sha1-ce)\x00'}}) 21:42:33 executing program 2: r0 = socket(0x18, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 21:42:33 executing program 4: creat(0x0, 0x0) r0 = syz_io_uring_setup(0x21f7, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0xa, &(0x7f0000000080), 0x1) 21:42:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000009ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:33 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x300, 0x0, 0x0) 21:42:33 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) 21:42:33 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x83) close(r0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000001c0)='%[,\x00'], 0x0) 21:42:33 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10f402) 21:42:33 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000002280)=0x80, 0x4) gettid() r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x83) close(r0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000001c0)='%[,\x00', &(0x7f00000002c0)='security.capability\x00'], &(0x7f0000000640)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000400)='}\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=']!\x00', &(0x7f00000005c0)='security.capability\x00', &(0x7f0000000600)='security.capability\x00']) [ 1128.089146][T14890] loop5: detected capacity change from 0 to 4 [ 1128.112513][T14890] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.124641][T14890] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:33 executing program 1: add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 21:42:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 21:42:33 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}) 21:42:33 executing program 1: socketpair(0x11, 0x2, 0x300, &(0x7f0000000000)) 21:42:33 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') [ 1128.247570][T14890] loop5: detected capacity change from 0 to 4 [ 1128.260377][T14890] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.272670][T14890] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000ace0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:33 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040), 0x4) [ 1128.407253][T14937] loop5: detected capacity change from 0 to 4 [ 1128.420475][T14937] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.433053][T14937] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:33 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfe80ffff00000000}}], 0x300, 0x0, 0x0) 21:42:33 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0xa, 0x0, 0x0, &(0x7f0000001800)=ANY=[], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 21:42:33 executing program 1: getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setgroups(0x6, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0]) 21:42:33 executing program 4: setgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) 21:42:33 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3d, &(0x7f00000000c0), 0x4) [ 1128.500357][T14937] loop5: detected capacity change from 0 to 4 [ 1128.508186][T14937] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.520399][T14937] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:33 executing program 2: ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0xffffffff}, 0x0, 0x0) 21:42:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000bce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:33 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x3c7c0, 0x0) 21:42:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000004840)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:42:33 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fchownat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0) 21:42:34 executing program 1: futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}) 21:42:34 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup2(r0, r0) pwritev(r1, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0) [ 1128.655044][T14971] loop5: detected capacity change from 0 to 4 [ 1128.678284][T14971] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.690634][T14971] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1128.730532][T14971] loop5: detected capacity change from 0 to 4 [ 1128.762240][T14971] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.774716][T14971] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:34 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) 21:42:34 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) 21:42:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:34 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xfec0ffff00000000}}], 0x300, 0x0, 0x0) 21:42:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, 0x0) 21:42:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="053cf1d055f3350d5195aee15ba4b167", 0x10) 21:42:34 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 21:42:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000005002a00000000590e"], 0x24}}, 0x0) 21:42:34 executing program 4: getuid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8805}) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r1 = semget$private(0x0, 0x0, 0x380) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f00000004c0)=""/32) r2 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000640)=[{&(0x7f00000005c0)="07762f9e4852161f", 0x8, 0xfff}, {0x0, 0x0, 0x7fffffff}], 0x80, &(0x7f0000000680)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x43, 0x33, 0x38]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x25]}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x35, 0x64, 0x30, 0x65, 0x33, 0x64, 0x34], 0x2d, [0x98c5c847b37b450c, 0x38, 0x32, 0x37], 0x2d, [0x31, 0x66, 0x66, 0x36], 0x2d, [0x63, 0x0, 0x33, 0x37], 0x2d, [0x37, 0x30, 0x64, 0x0, 0x64, 0x65, 0x67, 0x30]}}}, {@obj_user={'obj_user', 0x3d, '//'}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '\xae'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash}, {@subj_role={'subj_role', 0x3d, '/\\\x80![/@&(\xc3[}\'@-,('}}]}) fchownat(r2, &(0x7f0000000780)='./file0\x00', r0, 0xee01, 0x800) [ 1128.944787][T15006] loop5: detected capacity change from 0 to 4 [ 1128.966207][T15006] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1128.978523][T15006] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x201000, &(0x7f00000005c0)) 21:42:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002b00)={&(0x7f0000002a00), 0xc, &(0x7f0000002ac0)={0x0}}, 0x4008001) 21:42:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 21:42:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040), 0xffffffffffffff0d) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1129.062854][T15006] loop5: detected capacity change from 0 to 4 [ 1129.078108][T15006] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1129.090867][T15006] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000a80)="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", 0x678, 0x4000000, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) 21:42:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000dce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:34 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xff00000000000000}}], 0x300, 0x0, 0x0) 21:42:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @multicast2}, @nl=@unspec, @xdp, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='wg1\x00'}) 21:42:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f00000000c0)="59ed07a4529417432eb1305c0e9d85920a26928e", 0x14, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 21:42:34 executing program 1: add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 21:42:34 executing program 4: request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0) 21:42:34 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000200)=']', 0x1}], 0x0, 0x0) 21:42:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 21:42:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000100)="59ed07a4529417432eb1305c0e9d85920a26928e", 0x14, 0x810, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 21:42:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @dev}, @in={0x2, 0x0, @broadcast}, @xdp, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='macsec0\x00'}) 21:42:34 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') [ 1129.347247][T15058] loop5: detected capacity change from 0 to 4 [ 1129.363747][T15058] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1129.375938][T15058] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:34 executing program 4: r0 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='TIPCv2\x00', 0x0, r1) [ 1129.441233][T15058] loop5: detected capacity change from 0 to 4 [ 1129.464460][T15058] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1129.476550][T15058] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000ece0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:34 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x300, 0x0, 0x0) 21:42:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(r0, &(0x7f0000000080)=@phonet, 0x80) 21:42:34 executing program 2: add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000000)="cc", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x1, 0xffffffffffffffff) 21:42:34 executing program 3: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 21:42:34 executing program 4: socketpair(0x2, 0x0, 0x253, &(0x7f0000000080)) 21:42:34 executing program 2: socketpair(0x1, 0x80005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x40) [ 1129.593976][T15090] loop5: detected capacity change from 0 to 4 [ 1129.606270][T15090] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1129.618619][T15090] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:35 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001480)=[{&(0x7f0000000340)='\a', 0x1, 0x20000000000000}, {&(0x7f0000000440)="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", 0xffb, 0x6}], 0x0, 0x0) 21:42:35 executing program 4: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48, r0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0x0, 0x0) 21:42:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000fce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1129.686772][T15090] loop5: detected capacity change from 0 to 4 [ 1129.697038][T15090] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1129.710156][T15090] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000080)) 21:42:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000a80)="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", 0x5c1, 0x0, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) 21:42:35 executing program 1: perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) [ 1129.833424][T15119] loop5: detected capacity change from 0 to 4 [ 1129.847459][T15119] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1129.860118][T15119] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:35 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0xffffffffc4653600}}], 0x300, 0x0, 0x0) 21:42:35 executing program 4: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) 21:42:35 executing program 2: perf_event_open(&(0x7f00000000c0)={0x6, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:42:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="9d", 0x1, r0) 21:42:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000410ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={0x0}}, 0x0) 21:42:35 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net/syz0\x00', 0x200002, 0x0) 21:42:35 executing program 3: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) 21:42:35 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$rfkill(r0, 0x0, 0x0) 21:42:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000040), 0x4) [ 1130.041840][T15149] loop5: detected capacity change from 0 to 4 [ 1130.052016][T15149] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1130.064314][T15149] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0xfe) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth1_to_team\x00'}) 21:42:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c002010ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1130.120188][T15149] loop5: detected capacity change from 0 to 4 [ 1130.128206][T15149] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1130.140372][T15149] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1130.220657][T15174] loop5: detected capacity change from 0 to 4 [ 1130.236414][T15174] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1130.248524][T15174] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:35 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x300, 0x0, 0x0) 21:42:35 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x7ff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 21:42:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0xfe) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, @in={0x2, 0x4, @multicast1}, @rc, @qipcrtr={0x2a, 0x3, 0x8000}, 0x7, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @multicast1}, {0x6, @broadcast}, 0x10, {0x2, 0x4e23, @rand_addr=0x64010102}, 'team0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) 21:42:35 executing program 4: socketpair(0x1, 0x80005, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) 21:42:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @private0}}) 21:42:35 executing program 2: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000040)=@secondary) 21:42:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0xfe) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, @in={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @private=0xa010100}, @nl=@unspec, 0x7}) 21:42:35 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xe6, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x0, 0x0, 0x0, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) 21:42:35 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1130.368664][T15174] loop5: detected capacity change from 0 to 4 [ 1130.391051][T15174] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1130.403223][T15174] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:35 executing program 3: socketpair(0x18, 0x0, 0xd7d6a61, &(0x7f0000000d40)) 21:42:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @private}}}}]}]}, 0x54}}, 0x0) 21:42:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000011ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:35 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x300, 0x0, 0x0) 21:42:35 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="5eac944878182f0e7fd08adeda1f0e363cb6000000000000006e99", 0xfc9e, 0xfffffffffffffffa) 21:42:35 executing program 4: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0x810, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 21:42:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x4, 0x0, 0x3}, {0x2, 0x0, 0x0, 0x971f}]}) 21:42:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, r0) [ 1130.626143][T15227] loop5: detected capacity change from 0 to 4 [ 1130.636683][T15227] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1130.648865][T15227] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:36 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') 21:42:36 executing program 1: io_setup(0x13, &(0x7f0000000000)=0x0) io_setup(0x7, &(0x7f00000001c0)=0x0) io_cancel(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x0, 0x0) [ 1130.683203][T15227] loop5: detected capacity change from 0 to 4 21:42:36 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:42:36 executing program 2: add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) [ 1130.737694][T15227] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1130.750049][T15227] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:36 executing program 4: keyctl$setperm(0x5, 0x0, 0x70509c805d229dc8) 21:42:36 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') 21:42:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) 21:42:36 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x300, 0x0, 0x0) 21:42:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000012ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:36 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setns(r0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="100026bd7000fddbdf251600000008000348ecc88872e74f57889ae1ce32fc000000795713df1076a031f3d11009249aecb9ccfb846c2c2a003c94aed254e0717134", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) 21:42:36 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000140)="f9", 0x1, r1) 21:42:36 executing program 2: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x0, r0/1000+60000}) 21:42:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x18913, r0, 0x0) 21:42:37 executing program 3: io_setup(0x13, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) [ 1131.656856][T15284] loop5: detected capacity change from 0 to 4 [ 1131.672728][T15284] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.684897][T15284] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:37 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x125202, 0x0) 21:42:37 executing program 4: perf_event_open$cgroup(&(0x7f0000000ac0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0xfd) sendto$inet(r0, 0x0, 0x0, 0x50, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 21:42:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000014ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 1131.798284][T15284] loop5: detected capacity change from 0 to 4 [ 1131.805357][T15284] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.817446][T15284] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1131.886667][T15318] loop5: detected capacity change from 0 to 4 [ 1131.896663][T15318] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.909335][T15318] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1131.973057][T15318] loop5: detected capacity change from 0 to 4 [ 1131.980258][T15318] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.992417][T15318] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:37 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x300, 0x0, 0x0) 21:42:37 executing program 4: clock_adjtime(0x5, &(0x7f0000000280)) 21:42:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000040)="59ed07a452941743dc26bbc800069e290a26928e99c30c5088037dbbe7d4880bccd34633", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 21:42:37 executing program 1: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000080)) 21:42:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000019ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:37 executing program 2: r0 = gettid() prlimit64(r0, 0x5, &(0x7f0000000080), &(0x7f00000001c0)) 21:42:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000a80)="5e1ebbbcb6637156b6446c320669c06d847025e184fed41be93e7c2c4b3b43de69511f257913143d2224434e4a74c76cfa6ef89b4ce13ba96416c70db460e2c368e1fa9db713a4553ffd1beb888856cadadb95fb58a9421ecd62fad82c69d185a405eaa4b5007859fb72c2e142b31328e45a7c5b1ac477697d5575d3633b9f736a650ef82e618a825e7ff9ed522274c3a78ce3397efa83d6969a3e42b83b867c9104f0027aae409a7a7116868f34ef0ada538009f7698b9c0df4aad06272669a03d72e564cba1049aa2449d149990b0fab05ce1100c539ee7d53ec6df8f3fedbdcaf65735771a3e6fd06392e77d95221f8a544cfa7ce9180d7059abfe913231a2b9aa09d139ba3cd7cb4369af9b3ee9dfef42ccbe43627cf7628f55f63b94b1badcd51da78bc87f86f2d8d65bce7ff2d2bb088be5afda05f52ace0138434b49b86d8f0fef19fd84ce7885b88229d4f58d93ce310100c804e2c1433456b45cfe0c4119173149128b64676f0227f748f2a614074fa820803760717d43a3f4707dc42a4a3ec5a74682d2651be63c5fe7e12511743c45676a244844cf357ae0f2955cb5d044137e98ec070e8190b80c59316850cb69866445144c8314a184d49381beb8e4568c18df6ef25aa4679956ea6b90b5760f726940910c4b83710701f589483921ca3ce78e0bea924aa002eca11014c724b6d504b7744b6fbb65bc54cfdc5b15155c3f107a91fbc6f13b9a69845af3affadef63833e7b40f703cbd4ffd31815f46985ba98c63771203edb8d4e4941909c2b3bebd5310e5dc9c601d7d5a3deea396b023a1686582321c05937e03dbfbac0f28878a9aaf7db434be8715e04ad7694f9997381633693984739af2bb25350e9f21571e9ac12f4c3a33b5dc253f97b8065ee0e9746269b4a661eae07b3014b3a3ff0ce951dcc44ee5e73c3a8c2e7f44cb4fbd8facbe141a0387cdf04d9033160585dea79085b236ac14575524b381c70b16c98df9d4cb78a128ccc60711d7667e95f2c39f773449b7da9b534e1101e194f8f59b1176890bda68932e4e2002166cb9a9e514f7658e867633cb547a3063d74c61c90e5f1b5cd814590b456d819315a4c2c7da3b714663f762c0c3348876855faaa74cde8a089c84c64e00e7e1ee3056a4af386448a5e8e36cf8b2926f0f60f83ac8fbb2f1497f73dda2af69b832f0813d1cc975d5ebde1aa6d5afa695a5b5d06241b7726ac12de459c5ffc03a1a35fddcf9a51d95f89f8abf3fa466021a2c36bd2f9e11c3f822860235df07faa033fc0ebaef698d27b5eea5363a339da3c383090a6e204559f76811112009b23d85cc5085849f8f674e5a3c1afe59e15c2d46dee13304ed2138d40ba047cac78906b33759c56a5648bc452d4d33db4c1195444d495671ec503fe43a83347332862dea505fbf59bb5831454995b3aad5d26a803842c12c05e71f3e728d0cbccafbdd5da0a6dd5ad23ffe5cf8fc9cf41665e991bda236cc9615adfd5e4d2c53f9fe85f7c8fb48591a1d79a396cbd7592113a87d4e22bb23069355ebc00e08d76983c6360ce24d3722acbf3bc89d8efa7ecd9f3f91a7aeb53cc71778743b20a3468074ac18a6297b71eafddb345707811f70b29197596d2c3f99d6485f93c3bd7fd4dddae4004073ee506830035c63bdab8150679d7710719ba93d596ca90235dfacdc4b1da3a9dbd48a088e8df16c077301c72cf476b8fdc903dae95ce7403368707d846569a262511764feb030dfdf82dde7f79cabbc2f1f0caaa735a87d589ee010a22daf162ab0c2476c2eb6a1a3c7fdd5db6a0d1dc363bed00f459725f6c0eb583937d8d88352b20b7683a7308e73d602a6dbaa8b98c38358cb12f01e745a950bec655d196b164df04950ac6e3e458ef77b82da61c154f4760cc1e4ebd96f9dcd5262532a10b18d0989a71488394b30c0280f1b416883fac108371e0b008d947252077be3200ba0ce7a39477fb919cbe02f535574b3741e7fc429354ef97f5fd75730dfcda5c2187d4331123622ccd0cd1893dfc331cd6dd435d2a2c62bf0ac028d7466ecf65d69c3e42f1c5f97db857d3e8cd51614ad026e62548db19621b90fa426a9844ee6588e8a18f15d424d84a73aa3f37b766a73ad67348f38ca8fc6d9e6a28c154956c4fb5fdd7fdc1afc526329ac8bdf6b74b83a588d4ec063e15dca2650feac9d3ab2190c1a33e10742fe22272a7addb5a49b860726db7208078a8939f0a104e1e18fd8860856db5a85ffd94925cbcef5cb56323acc852fa0b4637957db42241d199649bf92859fc1abca1e0595337f2007d0cb7c16a3d14325188e60dedc6623988257ba04c402216667362ff43e388945a9ae1cc765ab69a79fc3a91a9bbe9ec0edb2068ff08e600d17cd1589fbf2c43917f44d5149f99fa68316d9fae106e5de7c999cd361ad34f98feba435132c29cd74d2482f4fbf9618503195d4b640980f9adda2c95c1ed116d44aa6fd83d5b3e8cca0ee2ddcbecd171b6f9b4ae46769c6c2b3b0c3a84ce45bd02e776dc2fda0f2942e57f8dfa5abc7d8ad80cd4667a3e58d36c849e9564365b87ace9d19fc65a105ab65e36a774987c0729790ccdd3edd199a463806baf4e5ef7215e5bcd013fe8c371e2e85bf6a3aa691f6f84be68fc802b250e16e38e7ae8a4ed354f91597dbf9a59f46c87c50bd040345de7db6d1d203475f235722551937bf6a1b5a6539a6e14d7aba13386cb662539b8d1da95ed735e2fec935a3e0f8af0b56837c6d039346fa83eb7bc9fe0dda7a2f78a41cb45142a1ab61d97334d066ab15e54c499ae09f74d0baee623ac96be1e320184327ca8bff1b8faef8d962087f84fb5969b4a67f6ef6e808558e20ee3b8b86cb3997cc661fd200640f7bade434037b0e2624c79af8865389d43d906e6d92de5ac94b1ab6884d745867813135073a55e35b04b653ff9b460b7f87fc755c91782158e2ce3f9fb46730bcb4de3efb268b0c4337a28a70cec560d13abbbfd62491fb0626e8e9dc048dfaa0bbccadc03e82c7b76b37f25b4fafb1c22a3568b09fd1f1964059e4f5cfd337dfbf4edf3b2db0bc236b6d681a7e2a955f39dfa261b00b104c56c98f7755d1857dce6c8fbb79674c1364a50960bf83e8d6584461f6e698a78986a9dcf69d197b3d75c81bd01f52f7d414851cbeb85f332ca85d5ed789f24b6fd21d48498994bd0fd8a1ff9be621689188c168a8b6713b18a06935a18a20a9f83aa26885eef7767852a5ee03b577899f72bfc0a3612bfa03a60ec4be2ee481f404915137dbf800cecdcd7c1292b5fa7486bffcfeb79d23fe8fd162daebe0967b5aaf8406b8e754ec865c371c5a254dd541af6f2dcd91160dc3d04dca361ae27609fa563b347712552d1ada3733f78fabf8cb0741d4e433a668846a2e9d74ea7bace87ebaa52905f537d2b0275db9ce673756055ad92a4a81577fc166cbfa9deb0074f7ae5274e58a452951b8577cdb243ad2f09d95eb90ffb874fe76b3b55dcbeb67676a521dccc074e283455bdfbe4f65704f7c4d5585dbea89cb61be8d19c9a627dc6be20f818845d01cb8e2d4678516c36ab2f39cdd29b63af59b1903cab768ceb46771fc151c014f748c24f68dbd8b719cfc715ac164763d101d8c69843de0b5617c154aaf3ed41cb9eaa37b2e1cd4941631e2ba5a3b8839af6f32aaf9124f12bf088e5685fd509840e7c6355a5b21da0e8aeec14cd30d7487b293155ed5a1a7cf412e219091bbb80441454431173d94f2ec9ece4b5fe58b786d059eb0dab6af5344b63d5bb4d7ad9ba48470dfff21f0e80a00b0988df1ad3f419f7f12a12576e5b9b219d70f5f867af7f1d83dc58d9af5c673c346104604ff865a5273021d14bf052b909c4cbc56353d097b7cb903ddb2a70a13efe705dda323175d660ea94a660f4f7535452ac9b4f9226ab085370e424a96776ebb67e841ccc40320be5ea63ac094891aab8635f66f0265172f6c723f73eb5ac27d6073365b24dc80045768783a05fc98373c921d2f70743da8b2fd7419db5867478c32f433dcfeeb002a2ced9fc6afba22dd87c595809b4c71e3b7cb7589b96f36669639db08702d950d9a6fed725539af78fb784d3a1cb4d195725b206d2825469080763335c73835b89edcced4af8d191d51ae0b230003479ab3ae0", 0xb8a, 0x0, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) 21:42:37 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001ac0)) 21:42:37 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffb) [ 1132.601007][T15340] loop5: detected capacity change from 0 to 4 [ 1132.630959][T15340] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:37 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='fd/4\x00') [ 1132.643249][T15340] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00001cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:38 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001480)=[{&(0x7f0000000340)='\a', 0x1, 0x20000000000000}, {&(0x7f0000000440)="b8", 0x1}], 0x0, 0x0) [ 1132.754643][T15367] loop5: detected capacity change from 0 to 4 [ 1132.765498][T15367] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1132.779232][T15367] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1132.796194][T15371] loop2: detected capacity change from 0 to 131072 21:42:38 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x300, 0x0, 0x0) 21:42:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000017280)={0x0, 0x0, &(0x7f0000017240)={&(0x7f00000172c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 21:42:38 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x2000, &(0x7f00000006c0)) 21:42:38 executing program 3: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/1, 0x1) 21:42:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000020ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000540)={0x0, "b8ecefb72233d79431b6402382b4554aa81b6f2b04cfa20faf9ab3fa69c46bb69f6160eab4a20699a8419d228ca4183889dda1cf27a38157b5322c46687d6089"}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)) [ 1132.879853][T15371] loop2: detected capacity change from 0 to 131072 21:42:38 executing program 1: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd646}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x101042) 21:42:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f000000a940)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x1, 0xe3, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x8721, 0x27, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000005000000000000000001800d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 21:42:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40000000}]}]}]}, 0x34}}, 0x0) 21:42:38 executing program 4: syz_mount_image$ext4(&(0x7f0000001740)='ext4\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x2080880, &(0x7f0000001840)) [ 1133.015031][T15396] loop5: detected capacity change from 0 to 4 [ 1133.030678][T15396] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1133.042914][T15396] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:38 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x54140, 0x0) [ 1133.116834][T15396] loop5: detected capacity change from 0 to 4 [ 1133.123969][T15396] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1133.136104][T15396] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:39 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x300, 0x0, 0x0) 21:42:39 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "b4cdc8d3462be1d57e3661a75ae4920748556da5f7ceb75c411a6128ed059316ec68c6c9864e854809112bc8cd9c4988f4b7a1535b0f6d8a1ccf7689fe80196c"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) 21:42:39 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='smaps_rollup\x00') 21:42:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c001020ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)) 21:42:39 executing program 3: add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0x0, 0xee01, 0xee00) 21:42:39 executing program 2: r0 = socket$inet(0x2, 0x3, 0x5) sendmmsg$sock(r0, &(0x7f0000001780)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, 0x80, 0x0, 0x0, &(0x7f00000013c0)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x2, 0x4) 21:42:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 21:42:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000100)) 21:42:39 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1133.903484][T15443] loop5: detected capacity change from 0 to 4 [ 1133.921444][T15443] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1133.933545][T15443] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x34}}, 0x0) 21:42:39 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 1134.086244][T15443] loop5: detected capacity change from 0 to 4 [ 1134.102208][T15443] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1134.114573][T15443] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:40 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}], 0x300, 0x0, 0x0) 21:42:40 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x60280, 0x0) 21:42:40 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 21:42:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x202600) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 21:42:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 21:42:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000022ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x60000011) 21:42:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1134.825151][T15487] loop5: detected capacity change from 0 to 4 [ 1134.845472][T15487] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1134.858174][T15487] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000025ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:40 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x80000) 21:42:40 executing program 2: perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:42:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) [ 1134.966768][T15509] loop5: detected capacity change from 0 to 4 [ 1134.983986][T15509] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1134.996276][T15509] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:40 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x300, 0x0, 0x0) 21:42:40 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x4]}, 0x8}) 21:42:40 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) 21:42:40 executing program 1: memfd_create(&(0x7f0000000180)='/dev/binder#\x00', 0x5) 21:42:40 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x0) [ 1135.102521][T15509] loop5: detected capacity change from 0 to 4 [ 1135.109614][T15509] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1135.122151][T15509] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:40 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000) 21:42:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000027ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:40 executing program 1: pselect6(0x40, &(0x7f0000000040)={0x6}, &(0x7f0000000080), 0x0, &(0x7f0000000180), 0x0) 21:42:40 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 21:42:40 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:40 executing program 1: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) dup3(r0, r1, 0x0) 21:42:40 executing program 3: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) [ 1135.293345][T15556] loop5: detected capacity change from 0 to 4 [ 1135.339458][T15556] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1135.352442][T15556] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:40 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}], 0x300, 0x0, 0x0) 21:42:40 executing program 4: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000a80)) 21:42:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) 21:42:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 21:42:40 executing program 3: memfd_create(&(0x7f0000000040)='\xa1\'&\x00', 0x0) 21:42:40 executing program 4: waitid(0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000600)) [ 1135.461288][T15556] loop5: detected capacity change from 0 to 4 [ 1135.470081][T15556] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1135.482364][T15556] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00002ece0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:40 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) 21:42:40 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) 21:42:40 executing program 3: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x8}, 0x18) 21:42:41 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x4, 0x30, 0xffffffffffffffff, 0x10000000) 21:42:41 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x300, 0x0, 0x0) 21:42:41 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) 21:42:41 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) 21:42:41 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) [ 1135.732397][T15608] loop5: detected capacity change from 0 to 4 [ 1135.745217][T15608] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1135.757351][T15608] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:41 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x30341, 0x0) [ 1135.820371][T15608] loop5: detected capacity change from 0 to 4 [ 1135.846030][T15608] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1135.858093][T15608] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00003fce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:41 executing program 4: perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:41 executing program 3: openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8c040}, 0x18) 21:42:41 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:41 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) 21:42:41 executing program 1: waitid(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) [ 1136.002818][T15643] loop5: detected capacity change from 0 to 4 [ 1136.019321][T15643] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1136.031440][T15643] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1136.159806][T15643] loop5: detected capacity change from 0 to 4 [ 1136.166818][T15643] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1136.179294][T15643] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:42 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x300, 0x0, 0x0) 21:42:42 executing program 4: perf_event_open$cgroup(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:42 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:42 executing program 3: wait4(0x0, 0x0, 0x83000009, &(0x7f00000006c0)) 21:42:42 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)) 21:42:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000040ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:42 executing program 3: perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:42 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$dupfd(r0, 0x7d6f0a0d4864eaaa, 0xffffffffffffffff) 21:42:42 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) dup3(r1, r2, 0x0) 21:42:42 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) [ 1136.835087][T15676] loop5: detected capacity change from 0 to 4 [ 1136.897335][T15676] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1136.909565][T15676] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:42 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) 21:42:42 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 1137.006264][T15676] loop5: detected capacity change from 0 to 4 [ 1137.019714][T15676] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1137.031876][T15676] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:43 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x300, 0x0, 0x0) 21:42:43 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:43 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 21:42:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) 21:42:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) 21:42:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000045ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:43 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:43 executing program 3: perf_event_open$cgroup(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:43 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:43 executing program 4: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:42:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000048ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1137.803154][T15718] loop5: detected capacity change from 0 to 4 [ 1137.821941][T15718] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1137.834018][T15718] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 1137.949660][T15740] loop5: detected capacity change from 0 to 4 [ 1137.976687][T15740] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1137.989185][T15740] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:43 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3665c4}}], 0x300, 0x0, 0x0) 21:42:43 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15570, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:43 executing program 2: syz_io_uring_setup(0x6c14, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:43 executing program 4: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0xffffffffffffff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00004cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1138.066516][T15740] loop5: detected capacity change from 0 to 4 [ 1138.073135][T15740] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.085206][T15740] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:43 executing program 4: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 21:42:43 executing program 2: syz_io_uring_setup(0x6c14, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:43 executing program 3: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)) 21:42:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000060ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1138.199676][T15766] loop5: detected capacity change from 0 to 4 [ 1138.214478][T15766] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.226673][T15766] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:43 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:43 executing program 2: syz_io_uring_setup(0x6c14, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) [ 1138.376352][T15786] loop5: detected capacity change from 0 to 4 [ 1138.410471][T15786] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.423705][T15786] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:43 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x300, 0x0, 0x0) 21:42:43 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) 21:42:43 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) 21:42:43 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:43 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 21:42:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 1138.504064][T15786] loop5: detected capacity change from 0 to 4 [ 1138.511478][T15786] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.523636][T15786] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:44 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 21:42:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000068ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:44 executing program 3: socket(0x2e, 0x0, 0x0) 21:42:44 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:44 executing program 4: syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) 21:42:44 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) [ 1138.815405][T15833] loop5: detected capacity change from 0 to 4 [ 1138.834338][T15833] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.846410][T15833] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1138.906977][T15833] loop5: detected capacity change from 0 to 4 [ 1138.920000][T15833] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1138.932486][T15833] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:44 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x300, 0x0, 0x0) 21:42:44 executing program 4: socket(0x15, 0x80805, 0x0) 21:42:44 executing program 3: semop(0x0, &(0x7f00000011c0)=[{0x0, 0x0, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) 21:42:44 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:44 executing program 2: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 21:42:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00006cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:44 executing program 1: syz_io_uring_setup(0x6c14, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:44 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000000)="eb3c906d6b6673a366617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e20}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=i']) 21:42:44 executing program 2: fork() waitid(0x0, 0x0, 0x0, 0x2, 0x0) 21:42:44 executing program 1: syz_io_uring_setup(0x6c14, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) [ 1139.546860][T15860] loop5: detected capacity change from 0 to 4 [ 1139.565152][T15860] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1139.577220][T15860] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000e00)={&(0x7f0000000cc0), 0xc, &(0x7f0000000dc0)={0x0}}, 0x91) 21:42:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001ac0)={&(0x7f0000001440)={0x2, 0x0, @empty}, 0x10, &(0x7f00000018c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a00)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x0) [ 1139.656783][T15860] loop5: detected capacity change from 0 to 4 [ 1139.676087][T15860] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1139.688336][T15860] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:45 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x300, 0x0, 0x0) 21:42:45 executing program 4: semtimedop(0x0, &(0x7f0000002100)=[{}], 0x1, 0x0) 21:42:45 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f100fcea0000010bfdff1d000400070001000600f2ff9b000780180001808018000080010000ff00c84d000002000000100006000465000000000c00090000000420000014aa140017007665746800008000616e0000000080000000779ddcc500001400000000000000000000000000001b120100000900120000007a28000000000c001b400500f77b00ff80000c00148008200191edfbed879db145000806028aab86000400000800000032040036453d0900020073"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x8c3713, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:42:45 executing program 1: syz_io_uring_setup(0x6c14, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 21:42:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000074ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:45 executing program 4: socket(0x29, 0x80805, 0x0) 21:42:45 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000a40)) [ 1139.855199][T15900] loop5: detected capacity change from 0 to 4 [ 1139.868787][T15900] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1139.880838][T15900] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:45 executing program 4: socket(0x2, 0x80805, 0x0) [ 1139.990417][T15900] loop5: detected capacity change from 0 to 4 [ 1139.998786][T15900] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1140.011107][T15900] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) 21:42:45 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000a40)) 21:42:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) 21:42:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00007ace0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:45 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x300, 0x0, 0x0) 21:42:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000fffce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1140.564397][T15942] loop5: detected capacity change from 0 to 4 [ 1140.576549][T15942] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1140.588724][T15942] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001480)="025984baa5032ed25540cd3960bb", 0xe}, {&(0x7f0000001540)="90", 0x1}, {&(0x7f00000015c0)='=', 0x1}], 0x3, &(0x7f0000001a00)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x0) 21:42:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 21:42:46 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000a40)) 21:42:46 executing program 4: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000001000)=""/207) [ 1140.664098][T15955] loop5: detected capacity change from 0 to 4 [ 1140.675425][T15955] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1140.687931][T15955] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000002ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:46 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0) [ 1140.733974][T15955] loop5: detected capacity change from 0 to 4 [ 1140.740709][T15955] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1140.752764][T15955] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xee00}}) 21:42:46 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x10}, 0x14}}, 0x4004854) 21:42:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001480)="025984baa5032ed25540cd3960bb57", 0xf}, {0x0}, {&(0x7f00000015c0)='=', 0x1}], 0x3, &(0x7f0000001a00)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x0) [ 1140.812355][T15977] loop5: detected capacity change from 0 to 4 [ 1140.823380][T15977] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1140.835529][T15977] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1140.916266][T15977] loop5: detected capacity change from 0 to 4 [ 1140.925930][T15977] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1140.938004][T15977] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x300, 0x0, 0x0) 21:42:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) 21:42:46 executing program 2: r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast1}}}) 21:42:46 executing program 3: pipe(&(0x7f0000000240)) 21:42:46 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000003ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:46 executing program 3: socket(0x2, 0x3, 0x6) 21:42:46 executing program 1: syz_io_uring_setup(0x6c14, &(0x7f0000000980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a00), 0x0) 21:42:46 executing program 4: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/83) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) [ 1141.054238][T16007] loop5: detected capacity change from 0 to 4 [ 1141.080216][T16007] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1141.092288][T16007] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf) 21:42:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01"], 0x14}}, 0x0) 21:42:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x7c7afba488c2620f, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x24}}, 0x0) [ 1141.200308][T16007] loop5: detected capacity change from 0 to 4 [ 1141.221141][T16007] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1141.233219][T16007] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4653600}}], 0x300, 0x0, 0x0) 21:42:46 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 21:42:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 21:42:46 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x0) 21:42:46 executing program 2: r0 = socket(0x29, 0x80805, 0x0) accept4(r0, 0x0, 0x0, 0x0) 21:42:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000004ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001fc0)={'ip6_vti0\x00', 0x0}) 21:42:46 executing program 2: r0 = socket(0x25, 0x80805, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 21:42:46 executing program 3: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x238c6605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:42:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) [ 1141.391044][T16070] loop5: detected capacity change from 0 to 4 [ 1141.400978][T16070] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1141.413334][T16070] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:46 executing program 3: semop(0x0, &(0x7f00000011c0)=[{0x0, 0x248b}, {0x3}], 0x2) 21:42:46 executing program 1: r0 = socket(0x18, 0x0, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) [ 1141.484526][T16070] loop5: detected capacity change from 0 to 4 [ 1141.501317][T16070] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1141.513412][T16070] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:47 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff}}], 0x300, 0x0, 0x0) 21:42:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002040), r0) 21:42:47 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffff8791]}, 0x8}) 21:42:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:42:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000005ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:47 executing program 1: socket(0x23, 0x0, 0x40000000) 21:42:47 executing program 3: socket(0x28, 0x1, 0x0) 21:42:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000037ae8f"], 0x20}}, 0x0) [ 1142.286375][T16124] loop5: detected capacity change from 0 to 4 [ 1142.308911][T16124] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1142.320973][T16124] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:47 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 21:42:47 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) 21:42:47 executing program 3: syz_genetlink_get_family_id$gtp(0xfffffffffffffffd, 0xffffffffffffffff) 21:42:47 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000300)=""/49) [ 1142.397277][T16124] loop5: detected capacity change from 0 to 4 [ 1142.407419][T16124] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1142.419844][T16124] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:47 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x300, 0x0, 0x0) 21:42:47 executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) 21:42:48 executing program 2: socketpair(0x2b, 0x0, 0x0, 0x0) 21:42:48 executing program 1: futimesat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', &(0x7f00000006c0)={{}, {0x0, 0x2710}}) 21:42:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0xffffffffffffff71}}, 0x0) 21:42:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000006ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffddbdf25020000000800020005000000050001000000000008000c000200800006000b002b00000008"], 0x64}}, 0x0) 21:42:48 executing program 4: r0 = socket(0x11, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) 21:42:48 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @local}}) 21:42:48 executing program 2: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f00000005c0)) [ 1143.223526][T16178] loop5: detected capacity change from 0 to 4 [ 1143.261447][T16178] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001fc0)={'ip6_vti0\x00', &(0x7f0000001f40)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}}}) 21:42:48 executing program 4: syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) [ 1143.273532][T16178] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1143.356534][T16178] loop5: detected capacity change from 0 to 4 [ 1143.365362][T16178] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1143.377418][T16178] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:48 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80ffff}}], 0x300, 0x0, 0x0) 21:42:48 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 21:42:48 executing program 3: socket(0x2b, 0x1, 0x0) 21:42:48 executing program 2: r0 = socket(0x15, 0x80805, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4c040) 21:42:48 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8001}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffff8791]}, 0x8}) 21:42:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000007ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:48 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 21:42:48 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 1143.525727][T16224] loop5: detected capacity change from 0 to 4 [ 1143.538253][T16224] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1143.550307][T16224] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1143.611047][T16224] loop5: detected capacity change from 0 to 4 [ 1143.644328][T16224] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:48 executing program 1: r0 = socket(0x29, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x40081) 21:42:48 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8001}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x14}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001fc0)={'ip6_vti0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000002040), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), 0xffffffffffffffff) 21:42:48 executing program 2: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a00000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) unshare(0x8040000) 21:42:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 1143.656413][T16224] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:49 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0ffff}}], 0x300, 0x0, 0x0) 21:42:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 21:42:49 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 21:42:49 executing program 3: socket(0x1e, 0x0, 0x2d) 21:42:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000008ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000001540)="90", 0x1}], 0x2}, 0x0) 21:42:49 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) 21:42:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) [ 1143.906523][T16292] loop5: detected capacity change from 0 to 4 [ 1143.929099][T16292] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1143.941273][T16292] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:49 executing program 2: r0 = socket(0x29, 0x80805, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x40008c5) 21:42:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) 21:42:49 executing program 1: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 21:42:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) [ 1144.000244][T16292] loop5: detected capacity change from 0 to 4 [ 1144.013614][T16292] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1144.025756][T16292] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:49 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x300, 0x0, 0x0) 21:42:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000009ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) 21:42:49 executing program 1: socket(0x1, 0x0, 0x1ff) 21:42:49 executing program 2: r0 = socket(0x2, 0x80805, 0x0) accept4(r0, 0x0, 0x0, 0x0) 21:42:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00@'], 0x48}}, 0x0) 21:42:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"a00f3ac24d7c649e5b6cd8f773c77337"}) 21:42:49 executing program 2: socket(0x18, 0x0, 0x10000) 21:42:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x2c}}, 0x0) [ 1144.239772][T16340] loop5: detected capacity change from 0 to 4 [ 1144.266077][T16340] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1144.278508][T16340] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:49 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 21:42:49 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 21:42:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, 0x0}, 0x0) [ 1144.351810][T16340] loop5: detected capacity change from 0 to 4 [ 1144.369076][T16340] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1144.381155][T16340] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:50 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x300, 0x0, 0x0) 21:42:50 executing program 1: socket(0x26, 0x80805, 0x800081) 21:42:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x701}, 0x14}}, 0x0) 21:42:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00'}) 21:42:50 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) 21:42:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000ace0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:50 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000002040), 0xffffffffffffffff) 21:42:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00') ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 21:42:50 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000600)="b0", 0x1, 0x7fffffff}], 0x0, &(0x7f0000000680)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) [ 1145.153782][T16397] loop5: detected capacity change from 0 to 4 [ 1145.164640][T16397] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1145.176735][T16397] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:50 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:42:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000bce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="66530700aef9d4952298897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374cbdb38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f71513", 0x51}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 1145.316344][T16430] loop5: detected capacity change from 0 to 4 [ 1145.346269][T16430] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1145.358567][T16430] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1145.405587][T16430] loop5: detected capacity change from 0 to 4 [ 1145.421913][T16430] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1145.434062][T16430] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:50 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}}], 0x300, 0x0, 0x0) 21:42:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000004940), 0xffffffffffffffff) 21:42:50 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x8641, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "684ed38a6e3c392685f1f344d5688775e38bfb21008e3bbd6d1495078ebc6eb68892ff5916d5585c9001b90c9ac5a381a606a3dda5e34e85d8858acd707a95ffbf5df8a26e74909dc8697aa7ef9b51a01db7e765470366e89d1884fd33f8656be11d15af965dd30943650a3bb94f8f4769c11fd8655e861f4a5b6a8cdd41953c2323df13d6965f9d417e595c1ce8ab8727836ca862ca6c105e27c1b793aa8c5bb607e1fdd89aa6ab88cf2f5dc77e990c5b1a154610c94659de7c492a5736659dfc21bede0f7f8a4a24c46aec163fc1782c658a27f2d810eeddeb3a80c850d683bb5dd4f72d80868986b2ba2b1487f1ac19369451adcbe0f83e66e4d189d8b1037c75003d26b9969334bf50b71e965b9cc6583117f17676b064198efe017837ca5b0cbb30256d151749dfc99b3bb07ac7a92a8bba287beab438b9fb455ede4cd5631621ad5d1829087f6c0b55b78c45bee6d436bbc0a9681b77774143a147b8fdf8a1c17fe12ac7fd40f553521030c3cb53595eb7ce6fbc9a3da6d896e190e40e8318e6697391c9d33399ba315197881bd1be13926a6d49e04c5789b7043571abaf61b6fdadad00073e09bb6dd9a82db2b3d900a6d3da68ffe80512388a1263657d1e65b997300c4d78e6a948bdf0ed9c84de63afa3734e529ece097cd3d24c7983c05596bd8cae68bdce2c1a3bec0cacc11eeeab0dbb5e2c7b1c015601f7a3291d18b0ed"}, 0x208) 21:42:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_1\x00'}) 21:42:50 executing program 2: creat(0x0, 0x0) r0 = syz_io_uring_setup(0x21f7, &(0x7f0000000000)={0x0, 0x433c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) 21:42:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="66530700aef9d4952298897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374cbdb38f8", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 21:42:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x33fe0}}, 0x0) 21:42:50 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',noextend']) [ 1145.567341][T16467] loop5: detected capacity change from 0 to 4 21:42:50 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) 21:42:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) [ 1145.618458][T16467] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1145.630779][T16467] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:50 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40100) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xa, @time={0x5, 0x81}, 0x80, {0x3, 0x7}, 0x81, 0x1, 0x8}) 21:42:51 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc0fe}}], 0x300, 0x0, 0x0) 21:42:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000dce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:51 executing program 4: shmctl$SHM_INFO(0x0, 0x3, 0x0) 21:42:51 executing program 1: fork() syz_open_procfs(0x0, &(0x7f0000001500)='status\x00') 21:42:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) 21:42:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x5452, &(0x7f0000000280)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 21:42:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00', 0x0, 0x61422}) 21:42:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) [ 1146.483777][T16506] loop5: detected capacity change from 0 to 4 [ 1146.502141][T16506] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1146.514259][T16506] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') 21:42:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$update(0x2, r1, &(0x7f00000001c0)='J', 0x1) 21:42:51 executing program 1: sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) 21:42:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) [ 1146.662339][T16506] loop5: detected capacity change from 0 to 4 [ 1146.690729][T16506] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1146.702810][T16506] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:52 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x300, 0x0, 0x0) 21:42:52 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 21:42:52 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:42:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x12}) 21:42:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002140)='oom_score\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000003400), r0) 21:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000ece0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') 21:42:52 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x40000000) 21:42:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 21:42:52 executing program 1: add_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='T', 0x1, 0xffffffffffffffff) [ 1146.835470][T16560] loop5: detected capacity change from 0 to 4 [ 1146.850563][T16560] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1146.863325][T16560] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:52 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:42:52 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e0, 0x0) [ 1147.031079][T16560] loop5: detected capacity change from 0 to 4 [ 1147.045616][T16560] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1147.064374][T16560] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:52 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff00000000}}], 0x300, 0x0, 0x0) 21:42:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) 21:42:52 executing program 4: add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r0) 21:42:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 21:42:52 executing program 2: add_key(&(0x7f0000002200)='big_key\x00', 0x0, &(0x7f0000002280)="0f", 0x1, 0xfffffffffffffff8) 21:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00000fce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:52 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000002780)=""/4115) 21:42:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) 21:42:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000680)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) 21:42:52 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 21:42:52 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x8c200) [ 1147.254195][T16618] loop5: detected capacity change from 0 to 4 [ 1147.267572][T16618] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1147.279709][T16618] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:52 executing program 1: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:42:52 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x300, 0x0, 0x0) 21:42:52 executing program 3: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) sync() 21:42:52 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x0) 21:42:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="007f"], 0x34}}, 0x0) 21:42:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x33fe0}}, 0x0) [ 1147.406421][T16618] loop5: detected capacity change from 0 to 4 [ 1147.415830][T16618] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1147.428869][T16618] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:52 executing program 1: sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003400), 0xffffffffffffffff) 21:42:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000010ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:52 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_triestat\x00') 21:42:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9205, 0x0) 21:42:52 executing program 4: socketpair(0x25, 0x1, 0x80, &(0x7f0000000000)) [ 1147.578599][T16664] loop5: detected capacity change from 0 to 4 21:42:52 executing program 1: add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="c8", 0x1, 0xffffffffffffffff) 21:42:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r1, 0x21, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) [ 1147.622296][T16664] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1147.634463][T16664] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:53 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}}], 0x300, 0x0, 0x0) 21:42:53 executing program 2: socketpair(0xa, 0x3, 0x5, &(0x7f0000000000)) 21:42:53 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') 21:42:53 executing program 4: shmget$private(0x0, 0x1000, 0x78000800, &(0x7f0000ffe000/0x1000)=nil) 21:42:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) [ 1147.738881][T16664] loop5: detected capacity change from 0 to 4 [ 1147.751800][T16664] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1147.763907][T16664] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000011ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001380)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:42:53 executing program 1: pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5452, &(0x7f0000000000)={{}, {0x0, 0x3}}) 21:42:53 executing program 4: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20e794dd9c0361af) 21:42:53 executing program 3: clock_gettime(0x2, &(0x7f00000009c0)) 21:42:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) [ 1147.893716][T16714] loop5: detected capacity change from 0 to 4 [ 1147.922251][T16714] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1147.934462][T16714] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000012ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1148.043445][T16736] loop5: detected capacity change from 0 to 4 [ 1148.052948][T16736] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.065087][T16736] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:53 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3665c4ffffffff}}], 0x300, 0x0, 0x0) 21:42:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:42:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000003400), 0xffffffffffffffff) 21:42:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x715}, 0x14}}, 0x0) 21:42:53 executing program 2: perf_event_open$cgroup(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000014ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) [ 1148.155580][T16749] loop5: detected capacity change from 0 to 4 [ 1148.167796][T16749] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.179938][T16749] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}, 0x8}, 0x0) 21:42:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0xc0189436, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/194, 0xc2}) 21:42:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/179, 0xb3) 21:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000019ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/194, 0xffffffffffffffd5}) [ 1148.307079][T16780] loop5: detected capacity change from 0 to 4 [ 1148.319260][T16780] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.331327][T16780] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1148.383189][T16780] loop5: detected capacity change from 0 to 4 [ 1148.393002][T16780] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.405405][T16780] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:53 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x300, 0x0, 0x0) 21:42:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000340)=""/187, 0xbb, 0x5) 21:42:53 executing program 4: syz_io_uring_setup(0x2a5c, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x21f7, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 21:42:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 21:42:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x1690}}, 0x0) 21:42:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00001cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) epoll_create(0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:42:53 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x8641, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "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"}, 0x207) 21:42:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffffffffffffffdb, 0x0, 0xf4}}], 0x1, 0x0, 0x0) 21:42:53 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='uid_map\x00') 21:42:53 executing program 1: sysfs$2(0x2, 0x4, &(0x7f0000000080)=""/121) [ 1148.551101][T16808] loop5: detected capacity change from 0 to 4 21:42:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f00000002c0)=@isdn, 0x80) [ 1148.607014][T16808] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.619391][T16808] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:54 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x300, 0x0, 0x0) 21:42:54 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) 21:42:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') 21:42:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x0, 0x0, 0x9}]}, 0x10) 21:42:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x5, 0x13e}, 0x1c) 21:42:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000022ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1148.735103][T16808] loop5: detected capacity change from 0 to 4 [ 1148.744934][T16808] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.757037][T16808] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') 21:42:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) 21:42:54 executing program 1: futex(&(0x7f0000000280), 0x3, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0) 21:42:54 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x91000080) 21:42:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto(r2, &(0x7f00000005c0)="ab4572462aa576944369217ed0e812426243fd5267336e9911cff54e8f1b71cc9a469e81901aa5d7cd71a2fe8082b351213042e7beee4566888ee82b0d4565a6c0e7f64de1d9c010a80b1ca1fa6aa7fdc04157a7d6d9ff36c98a41702e2dddf771b6cbdedf0d854fc66507827fcc0e445599ff04216bfb371b4663a164084d01f0bc5ed02033051f717122258ec4980f52d7de68479e0a3146fbe768f5a577792420819c2dc844783c0e4cadf3de4dd295a3bdbe52c2ca080a59b10f8fc7cbd3b984db36da635e8d29e3fb6239cc4d8db59ce0e1d820", 0xd6, 0xc000, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4, 0x5}]}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042dc0)={0x7, [{0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x9, "effdfbfac8aecb"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002dc0)={0x0, r6, "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", "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"}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000001740)=ANY=[@ANYBLOB="80060000", @ANYRES16=r4, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x90}, 0x80080) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) [ 1148.841156][T16851] loop5: detected capacity change from 0 to 4 [ 1148.865861][T16851] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1148.878442][T16851] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:54 executing program 2: clock_gettime(0x6, &(0x7f00000042c0)) [ 1149.025401][T16851] loop5: detected capacity change from 0 to 4 [ 1149.032218][T16851] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1149.044251][T16851] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:55 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x300, 0x0, 0x0) 21:42:55 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003bc0)={0x10}, 0x10}, {&(0x7f00000037c0)={0x10}, 0x10}], 0x2}, 0x0) 21:42:55 executing program 4: r0 = epoll_create1(0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x4}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 21:42:55 executing program 1: clone(0x20000, 0x0, 0x0, 0x0, 0x0) 21:42:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000025ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2023, 0x0) [ 1149.744321][T16892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16892 comm=syz-executor.2 [ 1149.757171][T16892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16892 comm=syz-executor.2 [ 1149.783108][T16893] loop5: detected capacity change from 0 to 4 21:42:55 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x4bb6abcf49440aff) 21:42:55 executing program 1: open(&(0x7f0000003f40)='./file0\x00', 0x16f40, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) [ 1149.814866][T16893] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1149.826917][T16893] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:55 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) setresgid(0x0, 0xffffffffffffffff, 0x0) 21:42:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @dev}}) 21:42:55 executing program 3: semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) 21:42:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$unix(r0, &(0x7f0000000000)="8dd1", 0x2, 0x0, &(0x7f0000000040)=@abs, 0x6e) [ 1149.967647][T16893] loop5: detected capacity change from 0 to 4 [ 1149.976519][T16893] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1149.988602][T16893] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:55 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}}], 0x300, 0x0, 0x0) 21:42:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 21:42:55 executing program 4: io_setup(0x10000, &(0x7f0000000200)) 21:42:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs, 0xffffffffffffffe4) 21:42:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000027ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:55 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x103c40, 0x0) 21:42:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x7fffffff) [ 1150.116323][T16939] loop5: detected capacity change from 0 to 4 [ 1150.132058][T16939] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1150.144130][T16939] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macvlan0\x00'}) 21:42:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 21:42:55 executing program 1: epoll_create1(0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000002280)={0x5}, &(0x7f00000022c0)={0x6}, &(0x7f0000002300)={0x3ff}, &(0x7f0000002340)={0x77359400}, &(0x7f00000023c0)={&(0x7f0000002380)={[0x10e3]}, 0x8}) [ 1150.259055][T16939] loop5: detected capacity change from 0 to 4 [ 1150.276641][T16939] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1150.288700][T16939] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:56 executing program 3: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000099c0), 0xffffffffffffffff) io_setup(0xc1, &(0x7f0000003bc0)) 21:42:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 21:42:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004", 0x25}, {&(0x7f0000000040)="899f0ea1156626d6fb07e613d79d0b6d58348a37", 0x14}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f20e70001"], 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 21:42:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00002ece0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:56 executing program 1: timer_create(0xcbe0bc4883d4bf0e, 0x0, &(0x7f0000000040)) 21:42:56 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x300, 0x0, 0x0) 21:42:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='p', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000480)=@secondary) [ 1150.873288][T16989] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1150.895248][T16994] loop5: detected capacity change from 0 to 4 [ 1150.905459][T16989] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 21:42:56 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 1150.922727][T16994] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1150.934861][T16994] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:56 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0xee01}}) 21:42:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004", 0x25}, {&(0x7f0000000040)="899f0ea1156626d6fb07e613d79d0b6d58348a37", 0x14}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f20e70001"], 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 1150.973138][T16989] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 21:42:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000045ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 21:42:56 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 21:42:56 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') setxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) [ 1151.060276][T17018] loop5: detected capacity change from 0 to 4 [ 1151.076332][T17018] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1151.084798][T17022] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1151.088481][T17018] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:56 executing program 1: r0 = epoll_create1(0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)) 21:42:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000048ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1151.155981][T17030] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 21:42:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) [ 1151.237050][T17042] loop5: detected capacity change from 0 to 4 [ 1151.246627][T17042] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1151.258876][T17042] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:57 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}], 0x300, 0x0, 0x0) 21:42:57 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x610301) 21:42:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@add_del={0x2, 0x0}) 21:42:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004", 0x25}, {&(0x7f0000000040)="899f0ea1156626d6fb07e613d79d0b6d58348a37", 0x14}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f20e70001"], 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 21:42:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00004cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004", 0x25}, {&(0x7f0000000040)="899f0ea1156626d6fb07e613d79d0b6d58348a37", 0x14}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f20e7000100000001000000ac"], 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 21:42:57 executing program 3: r0 = epoll_create1(0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)) [ 1151.802661][T17059] loop5: detected capacity change from 0 to 4 [ 1151.804957][T17062] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1151.824316][T17059] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1151.836393][T17059] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1151.854640][T17063] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1151.897367][T17062] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1151.916858][T17063] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 21:42:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, r0) [ 1151.949169][T17063] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1151.968327][T17059] loop5: detected capacity change from 0 to 4 [ 1151.978748][T17059] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004", 0x25}, {&(0x7f0000000040)="899f0ea1156626d6fb07e613d79d0b6d58348a37", 0x14}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f20e70001"], 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 21:42:57 executing program 3: syz_open_dev$loop(&(0x7f0000003d00), 0x0, 0x10040) [ 1151.990888][T17059] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000060ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') r1 = getpid() r2 = fork() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r0}) [ 1152.095247][T17093] loop5: detected capacity change from 0 to 4 [ 1152.125759][T17093] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:57 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff00000000}}], 0x300, 0x0, 0x0) 21:42:57 executing program 1: rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:42:57 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_names\x00') 21:42:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x0, 'veth1_to_bond\x00'}) 21:42:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000001540), r0) [ 1152.137851][T17093] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000068ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:57 executing program 1: futex(&(0x7f0000000040)=0x1, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0) 21:42:57 executing program 3: prctl$PR_SET_KEEPCAPS(0x8, 0x81) 21:42:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x0) [ 1152.265267][T17115] loop5: detected capacity change from 0 to 4 [ 1152.286748][T17115] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1152.298876][T17115] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:57 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0) [ 1152.355291][T17115] loop5: detected capacity change from 0 to 4 [ 1152.364519][T17115] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1152.376572][T17115] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:57 executing program 3: io_setup(0x2, &(0x7f0000000180)=0x0) io_destroy(r0) io_setup(0xdf, &(0x7f00000000c0)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 21:42:57 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/54) sync() r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/252) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/197) shmctl$SHM_INFO(r0, 0xe, 0x0) 21:42:57 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x300, 0x0, 0x0) 21:42:57 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 21:42:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070601020000000000000000000000000500010006"], 0x1c}}, 0x0) 21:42:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00006cce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:57 executing program 3: socket$unix(0x1, 0x12f5f7a8b121cfad, 0x0) 21:42:57 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003780)='/proc/sysvipc/shm\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x1]}, 0x8) [ 1152.713302][T17158] loop5: detected capacity change from 0 to 4 [ 1152.748188][T17158] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:42:58 executing program 1: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0) 21:42:58 executing program 3: epoll_create1(0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000002280), &(0x7f00000022c0)={0x6}, &(0x7f0000002300)={0x3ff}, &(0x7f0000002340)={0x77359400}, &(0x7f00000023c0)={&(0x7f0000002380)={[0x10e3]}, 0x8}) 21:42:58 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) [ 1152.760448][T17158] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f00000006c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) 21:42:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) 21:42:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) [ 1152.868244][T17158] loop5: detected capacity change from 0 to 4 [ 1152.882746][T17158] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1152.894949][T17158] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:58 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80ffff00000000}}], 0x300, 0x0, 0x0) 21:42:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000074ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) 21:42:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002022, 0x0) 21:42:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000140)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}], 0x10}, 0x0) 21:42:58 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0xfffffffffffffddb}, 0x0) 21:42:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$unix(r0, 0x0, 0x0, 0xc0d1, 0x0, 0x0) 21:42:58 executing program 4: clone(0x90000080, 0x0, 0x0, 0x0, 0x0) [ 1153.170472][T17199] loop5: detected capacity change from 0 to 4 [ 1153.215724][T17199] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1153.227877][T17199] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) 21:42:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000004980)) 21:42:58 executing program 4: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 21:42:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 1153.360448][T17199] loop5: detected capacity change from 0 to 4 [ 1153.368462][T17199] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1153.380927][T17199] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:59 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0ffff00000000}}], 0x300, 0x0, 0x0) 21:42:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x47a) 21:42:59 executing program 2: openat$hwrng(0xffffffffffffff9c, 0x0, 0x126203, 0x0) 21:42:59 executing program 3: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc14207fdc8a5c2f8) 21:42:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c00007ace0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:42:59 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000840)) 21:42:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:42:59 executing program 2: sysfs$2(0x2, 0xd0, 0x0) 21:42:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) 21:42:59 executing program 1: timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) [ 1154.134639][T17259] loop5: detected capacity change from 0 to 4 [ 1154.143036][T17259] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1154.155086][T17259] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:42:59 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)=@keyring) 21:42:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0, 0x2c}, {&(0x7f00000000c0)=""/242, 0xf2}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\f'], 0x14}}, 0x0) [ 1154.278136][T17259] loop5: detected capacity change from 0 to 4 [ 1154.285511][T17259] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1154.298127][T17259] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:00 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x300, 0x0, 0x0) 21:43:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b4c0)=[{0x0, 0x0, 0x0}], 0x1, 0x20000001) 21:43:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0x9}]}, 0x10) 21:43:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x3, 0x0, [], 0x0, 0x0, 0x0}, 0x47a) 21:43:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000001000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:00 executing program 4: statx(0xffffffffffffffff, 0x0, 0x0, 0xdb58aad0d6f7b6c8, 0x0) 21:43:00 executing program 1: timer_create(0x0, &(0x7f0000000680)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) 21:43:00 executing program 3: socket(0x1, 0x0, 0xd8a3) 21:43:00 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xd001, 0x0) 21:43:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002700), 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000003580), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 21:43:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004", 0x25}, {&(0x7f0000000040)="899f0ea1156626d6fb07e613d79d0b6d58348a37", 0x14}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e00000027f20e7000100000001000000ac"], 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 1155.044351][T17304] loop5: detected capacity change from 0 to 4 [ 1155.064731][T17304] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1155.076788][T17304] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00'}) [ 1155.170071][T17304] loop5: detected capacity change from 0 to 4 [ 1155.182262][T17304] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1155.194501][T17304] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:01 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x300, 0x0, 0x0) 21:43:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_to_batadv\x00'}) 21:43:01 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000540)="180bb0") ptrace$cont(0x9, r1, 0x0, 0x7) 21:43:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 21:43:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000002000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:01 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, 0x0, 0x0) 21:43:01 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) 21:43:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='veth1_macvtap\x00'}) [ 1156.047180][T17350] loop5: detected capacity change from 0 to 4 21:43:01 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 21:43:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000003580), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1156.104311][T17350] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1156.118739][T17350] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:01 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 21:43:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 1156.186087][ T25] audit: type=1326 audit(1620942181.494:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17364 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 21:43:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000003000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:01 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000004c0)=@req3, 0x1c) 21:43:01 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x8a042, 0x0) 21:43:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect(r0, 0x0, 0x0) 21:43:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg0\x00'}) 21:43:01 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffc4653600}}], 0x300, 0x0, 0x0) 21:43:01 executing program 4: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0xb000000e}) 21:43:01 executing program 3: getresgid(&(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 21:43:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000004000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:01 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x4000000) 21:43:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept(r0, 0x0, 0x0) 21:43:01 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000200)='big_key\x00', 0x0, 0x0) 21:43:01 executing program 3: keyctl$assume_authority(0x10, 0x0) keyctl$assume_authority(0x10, 0x0) 21:43:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) [ 1156.624665][T17405] loop5: detected capacity change from 0 to 4 [ 1156.649651][T17405] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1156.662131][T17405] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:02 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808018000000010000ff00000015ede94bbd143cb106000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b120100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000806028aab86000000000800000032040036453d0900020073797a30"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x8c3713, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:02 executing program 1: r0 = epoll_create1(0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)) 21:43:02 executing program 4: timer_create(0x0, 0x0, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000140), 0x0) [ 1156.756501][T17405] loop5: detected capacity change from 0 to 4 [ 1156.763658][T17405] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1156.776326][T17405] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000005000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fork() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) 21:43:02 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xd000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:43:02 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 21:43:02 executing program 4: mlock(&(0x7f0000df8000/0xb000)=nil, 0xb000) fork() mremap(&(0x7f0000dfb000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000e01000/0x3000)=nil) munmap(&(0x7f0000dfc000/0x4000)=nil, 0x4000) 21:43:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000006000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, &(0x7f0000000300)="9ef3", 0x2, r0) [ 1156.903288][T17438] loop5: detected capacity change from 0 to 4 [ 1156.913519][T17438] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1156.925841][T17438] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:02 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x61e302, 0x0) 21:43:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) [ 1157.046921][T17468] loop5: detected capacity change from 0 to 4 [ 1157.057626][T17468] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1157.070126][T17468] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1157.139419][T17468] loop5: detected capacity change from 0 to 4 [ 1157.146744][T17468] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1157.158906][T17468] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x2400c011) 21:43:02 executing program 4: semget(0x0, 0x85fcf48428aeb6c0, 0x0) 21:43:02 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 21:43:02 executing program 1: mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000) 21:43:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000007000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:02 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x300, 0x0, 0x0) 21:43:02 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x7000) 21:43:03 executing program 3: unshare(0x2000600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 21:43:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @multicast1}, &(0x7f0000000000)=0xffffffffffffffb2) [ 1157.674176][T17498] loop5: detected capacity change from 0 to 4 21:43:03 executing program 3: setrlimit(0x7, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) 21:43:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@rand_addr=' \x01\x00', @dev, @private1}) 21:43:03 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0xe000) 21:43:03 executing program 2: mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)=ANY=[], 0x2b04}}, 0x0) [ 1157.713296][T17498] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1157.725375][T17498] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:03 executing program 2: clock_gettime(0x61cdfaf1c07bd961, 0x0) 21:43:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) 21:43:03 executing program 3: r0 = fork() rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x0, &(0x7f0000000100)) [ 1157.905836][T17498] loop5: detected capacity change from 0 to 4 [ 1157.913110][T17498] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1157.925372][T17498] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000008000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1157.996035][T17540] loop5: detected capacity change from 0 to 4 [ 1158.004139][T17540] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1158.017179][T17540] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1158.075838][T17540] loop5: detected capacity change from 0 to 4 [ 1158.082613][T17540] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1158.094785][T17540] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:03 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x300, 0x0, 0x0) 21:43:03 executing program 4: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) 21:43:03 executing program 2: unshare(0x2000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{}, "12484bf9323f3718", "5fe78cef2d459452499c9f4c4911b42f", "d86e5941", "ebc6e84d2c707606"}, 0x28) 21:43:03 executing program 1: setrlimit(0x7, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 21:43:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00006}) 21:43:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000009000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:03 executing program 3: munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 21:43:03 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x38}, 0x0) 21:43:03 executing program 2: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) fork() [ 1158.583300][T17562] loop5: detected capacity change from 0 to 4 21:43:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 21:43:03 executing program 1: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ff9000/0x1000)=nil, 0x0) 21:43:03 executing program 3: unshare(0xc020200) unshare(0x4000000) [ 1158.622976][T17562] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1158.635122][T17562] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1158.719995][T17562] loop5: detected capacity change from 0 to 4 [ 1158.737950][T17562] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1158.750098][T17562] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:04 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x300, 0x0, 0x0) 21:43:04 executing program 1: unshare(0xc020200) shmctl$IPC_RMID(0x0, 0x0) 21:43:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@mcast1, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200200}) 21:43:04 executing program 2: mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffe) 21:43:04 executing program 3: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff3000/0x5000)=nil, 0x5000, 0x12) munmap(&(0x7f0000fef000/0x11000)=nil, 0x11000) 21:43:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000000a000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:04 executing program 1: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffffff) [ 1158.906984][T17608] loop5: detected capacity change from 0 to 4 [ 1158.921401][T17608] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1158.933468][T17608] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:04 executing program 1: unshare(0xc020200) unshare(0x20060000) [ 1158.956633][T17620] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program 21:43:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:43:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x3}}) 21:43:04 executing program 3: mlock2(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3) 21:43:04 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000340), 0x0) [ 1159.124559][T17608] loop5: detected capacity change from 0 to 4 [ 1159.131404][T17608] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1159.143985][T17608] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:04 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x300, 0x0, 0x0) 21:43:04 executing program 3: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) 21:43:04 executing program 1: unshare(0xc020200) unshare(0x20060000) 21:43:04 executing program 4: munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 21:43:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000000b000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000000c000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:04 executing program 1: unshare(0xc020200) unshare(0x20060000) [ 1159.229847][T17655] loop5: detected capacity change from 0 to 4 [ 1159.238454][T17655] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1159.250540][T17655] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 1159.351177][T17671] loop5: detected capacity change from 0 to 4 [ 1159.374632][T17671] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1159.386801][T17671] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1159.437169][T17671] loop5: detected capacity change from 0 to 4 [ 1159.451071][T17671] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1159.463515][T17671] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:05 executing program 3: setrlimit(0x7, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:43:05 executing program 2: socketpair(0xa, 0x3, 0x2, 0x0) 21:43:05 executing program 1: unshare(0xc020200) unshare(0x20060000) 21:43:05 executing program 4: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000) 21:43:05 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x300, 0x0, 0x0) 21:43:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000000d000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 21:43:05 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x7) 21:43:05 executing program 2: setrlimit(0xa954a1f7e745ef3a, &(0x7f0000000040)) 21:43:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x80}) 21:43:05 executing program 4: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 21:43:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, 0x81, 0x0, 0x0, 0x400, 0xdd, 0x200}) 21:43:05 executing program 3: madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3) 21:43:05 executing program 2: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2) 21:43:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r0, &(0x7f00000019c0)=[{&(0x7f0000000080)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001a40)=ANY=[], 0x80}], 0x1, 0x0) [ 1160.201461][T17714] loop5: detected capacity change from 0 to 4 [ 1160.222755][T17714] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1160.234827][T17714] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d40390}) [ 1160.289529][T17714] loop5: detected capacity change from 0 to 4 [ 1160.311533][T17714] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1160.323704][T17714] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:05 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x300, 0x0, 0x0) 21:43:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000000e000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:05 executing program 3: mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) 21:43:05 executing program 2: mlock(&(0x7f0000df8000/0xb000)=nil, 0xb000) fork() munmap(&(0x7f0000dfc000/0x4000)=nil, 0x4000) 21:43:05 executing program 4: setrlimit(0x6, &(0x7f0000000040)) fork() 21:43:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 21:43:05 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:43:05 executing program 4: shmat(0x0, &(0x7f0000ff5000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 21:43:05 executing program 2: capset(&(0x7f0000000a40)={0x20071026}, &(0x7f0000000a80)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 21:43:05 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/schedstat\x00', 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2) 21:43:05 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000080)="d5f65c0b2b628792a58af0762d0addc31f57fca2a5affee6685f0f4872cbfbea4fec6259908f75b3e4c1a16349334eafd4fed2456e53fdd09c21350926974cc009dbeb0b224c9ceb06570f796d5eaedb74e5f0fb7d8ff78d5a385ccbe78d07e1de31bfb3dda51a4212", 0x69}, {&(0x7f0000000100)="9bf74058d6950b8827bb9df7de9e6852e549274bc55a410bdc74475ad92567e37f554840a47f98773accf3a588be6716071e5b8ea9a35e22a8649b31b39f254933b88e3c85f9eccfdd60e48994e6c42ca87c4d19363c0f5f94e1d521c7849856e9a752be00cb62", 0x67}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000180)="6edda5bfd0e9af178e1e784beee44b0896b16736d698a70bb98f57fbfddb662d735b572cc52664ac42f73bb6379ea25cde349f919ebef6f147a2a2208187170bc7b2dd3c6113a77ec5cfd125c3db24d7dedc0767987b6b7373b879c8f4867f67e0b562126478876de159435a0cc324389d4db2e8d353df160221695ea018eb641ca556550efc383a2683769991e1457e356292f12ffbe85daeadb1bfe09bbb147135ad0002aab28e14ac3f39c66d2e057d747a0738ae1785daa7d43e4bda8590257dd8dc8c37ad47403bbb1268766456", 0xd0}, {&(0x7f0000000280)="054c8251cfbf77993bd9f91242c6dc2cf5313d3345905a7d494bce3cbe484c3925628c4fff995e8a8b9bc98a85ccd70cd581bb60275f4e7dc5d0ffd3e82e2f13", 0x40}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000002c0)="755451c93a701863b6618bcc231a2fa20008cf1078ad3db282c4389ffc0daf10e5d569850c3c59d47b8eee87401d3b288f3c768ce416da596783e57c1488b32d42ba1f72c7547ac89359b5dbdf7faac49b74acda2295126e79f7c175d3d41148a780e7a2aee36a0272b2aa668392a7844e1eb7f9bf12b179137fbedb4bdae3b77616a0037de0d4cdb077b8646c74d998a8816ee1986d06204b1274cfd005a8779ec432d7eb5a08df3fa6994acbe2667240a14f439a3b95cddf01a553d67964543d3ea044468b89b4fb634ef50195a64ca8d3620ee1c92e82a1c2297f4c29cc99406440ec512bd6598571dcce", 0xec}, {&(0x7f00000003c0)="a216705eb29e39d53c16254186bfdd405dfb0b5fb3ba4e103551af8c20c2a4ae48c2fe87f0106da80472fdae941858f5c675eadede02637b4aeb5a861f8d8fdc4cc0f19337ef67758299ea7c37ff34acc5b85b921ca26b19c77b8400e5caf1e2baa1bafd547384782c1ae4d34e85cc1b4e9f920b69d7aafce21bd3c3193397354c5adc24cd9bdda2ef45e8c5960163d82ba40d25914133ccd66f1bd8184ba7ce39cd74a91138", 0xfffffec1}, {&(0x7f0000000480)="30c92cc2c85444481c3245990206e8c48cc1f8f0ab2c604a2027a7a060c5812ea96b2947f5cef5b575251f9c881e487db83db519d22df1c16a89ac30f5a77e0dc2ff86ca43f560d667f61e313bda272fda77746beab3e2a7264c27831632cc4fe73e91605ba5854c4e86707753e55bbefba86e8992462c497293b2abbc8e90d76b72bcb6f4282790cb7c5796e5bfd58a471919e5357f74040385f7338cdbddf766774bfa42f0f676d870d5a84a356b553559766d2929114421eb2b41fae472cb1a2e", 0xc2}], 0x9, 0x0, 0x0, 0xc0001}, 0x20000040) [ 1160.562351][T17765] loop5: detected capacity change from 0 to 4 21:43:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffe}}, 0x0) [ 1160.605148][T17765] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1160.617204][T17765] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:06 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}], 0x300, 0x0, 0x0) 21:43:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0200000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:06 executing program 2: unshare(0x2000600) 21:43:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0xffffffffffffffff, 0x0) 21:43:06 executing program 4: unshare(0x2000600) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fchdir(r0) 21:43:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9cc7e1ff0eebd200a7e24d05da409a819fbca437f553d5a06d84eaec9f6c90f9feb0611301f32ad891515dc4c8a6b27a6998849b9cf7846f8f67347a8817a6d0", "a5e2d61c3ab138715abe6cbe3c26fcf6a90a6e86c7a0c1196d5c0454c49c21bf41f96536c64eee7a94c95e873896f1ecf37f50dcb15f312238dd75ce43ab1210", "2d4048bb6d51f36d06911190f2d5adca9f7a1b1e5a90dca47ef04c946c2a9409"}) 21:43:06 executing program 2: unshare(0x2000600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 21:43:06 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 21:43:06 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/220) 21:43:06 executing program 3: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {r1, r2+10000000}}, 0x0) [ 1160.824761][T17798] loop5: detected capacity change from 0 to 4 21:43:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:43:06 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "6ef8e989338ffe7ec767e4a68f4d65d004000079c1b6fd0ebf0c6e4cb8aeca4f72535ffc3c6281fad8232d59c478f5be7b7c00"}, 0x48, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "6ef8e989338ffe7ec767e4a68f4d65d004000079c1b6fd0ebf0c6e4cb8aeca4f72535ffc3c6281fad8232d59c478f5be7b7c00"}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "6ef8e989338ffe7ec767e4a68f4d65d004000079c1b6fd0ebf0c6e4cb8aeca4f72535ffc3c6281fad8232d59c478f5be7b7c00", 0x31}, 0x48, r0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) msgctl$IPC_RMID(r4, 0x0) [ 1160.863672][T17798] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1160.875836][T17798] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:06 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x300, 0x0, 0x0) [ 1161.001397][T17798] loop5: detected capacity change from 0 to 4 [ 1161.010152][T17798] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1161.022321][T17798] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0300000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:06 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 21:43:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @rand_addr=' \x01\x00', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00006}) 21:43:06 executing program 1: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 21:43:06 executing program 4: madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0xa) fork() 21:43:06 executing program 3: mlock(&(0x7f0000dfb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dfb000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000e01000/0x3000)=nil) 21:43:06 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000280), 0x0) 21:43:06 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/schedstat\x00', 0x0, 0x0) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) 21:43:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000260}) [ 1161.149973][T17845] loop5: detected capacity change from 0 to 4 [ 1161.178066][T17845] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1161.190243][T17845] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:06 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 21:43:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}, 0x0) [ 1161.263965][T17845] loop5: detected capacity change from 0 to 4 [ 1161.271463][T17845] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1161.283530][T17845] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:07 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}], 0x300, 0x0, 0x0) 21:43:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) 21:43:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) 21:43:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0400000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:07 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0xff8, 0x9}], 0x0, 0x0) 21:43:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r1, 0x121, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 21:43:07 executing program 2: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000e7f000/0x4000)=nil, 0x2) mprotect(&(0x7f0000e84000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000e81000/0x4000)=nil, 0x4000) mremap(&(0x7f0000e82000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 21:43:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan3\x00'}) [ 1161.986472][T17891] loop5: detected capacity change from 0 to 4 [ 1161.997235][T17891] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1162.012181][T17891] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0xe33, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001680)="0da50ef290b2ae58", 0x8, 0x7}], 0x0, &(0x7f0000000580)=ANY=[]) 21:43:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0500000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 21:43:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001240)) [ 1162.160158][T17919] loop5: detected capacity change from 0 to 4 [ 1162.164733][T17915] ISOFS: Unable to identify CD-ROM format. [ 1162.210240][T17919] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1162.222405][T17919] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1162.250884][T17915] ISOFS: Unable to identify CD-ROM format. [ 1162.277262][T17919] loop5: detected capacity change from 0 to 4 [ 1162.292294][T17919] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1162.304855][T17919] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:08 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x300, 0x0, 0x0) 21:43:08 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001240)) 21:43:08 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0xea60}) 21:43:08 executing program 4: clock_getres(0x34aca81b02d7e042, 0x0) 21:43:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000ec0), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 21:43:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0600000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:08 executing program 1: waitid(0x0, 0x0, 0x0, 0x13cdbf8842063a1a, 0x0) 21:43:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x400, &(0x7f0000001240)={[{@overriderock}], [{@seclabel}]}) 21:43:08 executing program 4: lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) 21:43:08 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002301000000000123252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x118c0}, {0x0}, {0x0}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a0802000001000001010134001a0100000000011a64000000000000647809140b2a3a0800000001000001120066", 0x67, 0x8b800}], 0x0, &(0x7f0000015200)) getdents(r0, &(0x7f0000000800)=""/212, 0xd4) [ 1162.899209][T17950] loop5: detected capacity change from 0 to 4 [ 1162.910052][T17950] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1162.922298][T17950] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0700000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:08 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x88041, 0x0) write$cgroup_type(r0, 0x0, 0x0) [ 1163.050853][T17970] loop5: detected capacity change from 0 to 4 [ 1163.060611][T17970] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1163.072685][T17970] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1163.095110][T17976] ISOFS: Unable to identify CD-ROM format. 21:43:08 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x300, 0x0, 0x0) 21:43:08 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4003, 0x0) 21:43:08 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) 21:43:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0800000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:08 executing program 3: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/85) 21:43:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0x1f7, 0x9}], 0x0, &(0x7f0000001240)) 21:43:08 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0) [ 1163.179893][T17976] ISOFS: Unable to identify CD-ROM format. 21:43:08 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0) 21:43:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 1163.258057][T18001] loop5: detected capacity change from 0 to 4 [ 1163.284710][T18009] loop2: detected capacity change from 0 to 1 21:43:08 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 21:43:08 executing program 3: futex(&(0x7f0000000100), 0x4, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x0) [ 1163.304107][T18001] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1163.316443][T18001] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:08 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) [ 1163.374272][T18009] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 1163.455676][T18001] loop5: detected capacity change from 0 to 4 [ 1163.462879][T18009] loop2: detected capacity change from 0 to 1 [ 1163.469689][T18001] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1163.475965][T18009] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 1163.481778][T18001] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:09 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x300, 0x0, 0x0) 21:43:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) 21:43:09 executing program 3: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/118) 21:43:09 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x208400, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:43:09 executing program 2: process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 21:43:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0900000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:09 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x101) 21:43:09 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000120055022dbd70ffff7f0010000000000000083b0d00"/41, @ANYRES32=0x0, @ANYBLOB="000000000500000003000000f8ffffff1a000100cbccfc1da6"], 0x13c}}, 0x0) 21:43:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) [ 1164.178383][T18048] loop5: detected capacity change from 0 to 4 21:43:09 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 21:43:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x008']}) [ 1164.225505][T18048] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1164.237683][T18048] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0xec4}, 0xec4}}, 0x0) [ 1164.326511][T18048] loop5: detected capacity change from 0 to 4 [ 1164.337075][T18048] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1164.349738][T18048] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:10 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3665c4}}], 0x300, 0x0, 0x0) 21:43:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) 21:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) 21:43:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 21:43:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000500)) 21:43:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0a00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000010701"], 0x8c}}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {0x0, 0xffffff37}, {0x0, 0xffffffe0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 21:43:10 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, 0x0, 0x0) [ 1165.128497][T18103] loop5: detected capacity change from 0 to 4 21:43:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x880) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080804) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x4) 21:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x14, 0x2, 0x6, 0x606}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) [ 1165.173770][T18103] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1165.185855][T18103] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:10 executing program 4: r0 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) 21:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x800, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0xc, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}}, 0x0) [ 1165.317799][T18103] loop5: detected capacity change from 0 to 4 [ 1165.339502][T18103] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1165.351880][T18103] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:10 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x300, 0x0, 0x0) 21:43:10 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40) 21:43:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) keyctl$set_timeout(0xf, r0, 0x0) 21:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000004080b0700000000000000000c0000010900010073797a1235"], 0x50}}, 0x0) 21:43:10 executing program 1: r0 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x0, 0x0) 21:43:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0b00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:10 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='#! .'], 0x191) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:43:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 21:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x24}}, 0x0) 21:43:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x2102) 21:43:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010201020000000000000000010000070e0006006972632d32303030300000000800083fffe60000180001"], 0x44}}, 0x0) [ 1165.503215][T18170] loop5: detected capacity change from 0 to 4 [ 1165.515902][T18170] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1165.528162][T18170] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:10 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, &(0x7f0000000140)='FREEZING\x00', 0x9) [ 1165.622832][T18196] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.630196][T18170] loop5: detected capacity change from 0 to 4 [ 1165.662741][T18170] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1165.674953][T18170] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:11 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x300, 0x0, 0x0) 21:43:11 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x0, &(0x7f00000002c0)={0x0}) 21:43:11 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 21:43:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0xa, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0x17, 0xd, 0x1, 0x0, "719304411764e9406d005c627ffc31a33757cc"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) 21:43:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0c00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 21:43:11 executing program 3: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x5e, 0x0) 21:43:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) [ 1166.396047][T18220] loop5: detected capacity change from 0 to 4 [ 1166.408326][T18220] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1166.420939][T18220] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:11 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x101) 21:43:11 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:43:11 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000500)) 21:43:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x91) [ 1166.468357][T18220] loop5: detected capacity change from 0 to 4 [ 1166.477601][T18220] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1166.490394][T18220] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:12 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x300, 0x0, 0x0) 21:43:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 21:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc}, 0x14}}, 0x0) 21:43:12 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x14) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x453, 0x1, 0x70bd2c, 0x3ff, "dc"}, 0x14}}, 0x0) 21:43:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 21:43:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0d00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1166.747455][ T25] audit: type=1107 audit(1620942192.054:693): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='Ü' [ 1166.759166][T18268] loop5: detected capacity change from 0 to 4 [ 1166.775329][T18268] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1166.787433][T18268] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000408010800faff000000000000000000060002400000000005000300ff"], 0x24}}, 0x0) 21:43:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 21:43:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x1010, 0x0, 0x0, "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"}, {0x58, 0x0, 0x0, "363579291ca7e422ccb0b2c5b420a351c2608cce3580549776613cbc7d9f5b236450cd8361d0105ac0f6e3e32ae1ef1eed3b0645559bc76e30e36b7787756c7df4"}, {0x68, 0x0, 0x0, "5ccbff552cd8a00424c2175f00d128546ce57c33588ca365a389327985279005b70cb62fc83dee1c023528437d06d39bbcdcdae053356cc3603b6f4635fe74e6c9c13252cbfd30f3b7e0bd1e8b97ce8c6d"}, {0xe0, 0x0, 0x0, "e5704fef7cb4786646e1963dbbedbd2c1e3c90e41ee69b36829e04b017d0a61a0cfbc1337dc2e4261cc48a22f11715eee00b18d3122b650a10b203fc45de692e611c28e96b7cf68254959a855aa164a2559c35521c0dcd3934a8d8600dfb71e2a862b49d683076f89b2ecfc02328a20c461610faed8a671993ec9698612e7056479ba2431730e7ae353725b397349a9ff7b5028cf2570db2238356fe2a150f144bfefc66d0e9280a9443395ea645972155de8eb07c4612b9a4d56571891b716a852470eb4841612a12"}, {0xe0, 0x0, 0x0, "db6aacbf9d2509e9dfa9bcda2b3f3b891b8a2b95183663ee937dae084cb2fd3783b815ef265e3243d52c6461dbded9633d2b967cadb5a175ac71aed3049f91bf8c3ab64d474c1c7305b1c4f8a01a24c02a1dbaead69ec52f2a21d9342b8e22fac122d0da72a258a0106a19226a60c53bb9a10163e30ecc76c0c6f94090ebcd71e1eb2f2fe491ead18f69890594e4cae99471a8cca527ca7912af7c4d0f9fd1d6226b3bd091f8168f367d9dd776835effcd947aede36380a1c3cc9f6b8cd83076d7733df8d89737e74c"}, {0x40, 0x0, 0x0, "a6b9251cca14205d83be60e142c81247d31b92af53cd087346720ae5c62192d3a741a210476ba6b1f8"}, {0xb0, 0x0, 0x0, "9615d521bf47870b56ed5557303247a833a2ca6a70264f5bc52ce33fcf0bd34c07291023bc39b23ebe3315fe81d046571131efe0903a05e02f269c3d7665dfbace59fd7a56b982708f9a7ad94c80d57bfa77f597e11b2546e5fa2d9e07a3f65ee0edf7f11687bb30c0e437def7865eddc9fc92d4b9dbd398dbb2e710b676f4095114527829eb1ca1be080d204da7eb301b4d889821bf9d4b41"}, {0xc88, 0x0, 0x0, "f69b4f51af03db8e6fb1d190c0cb4c91e2bdebb50be7835a850b71f9989a3d398d8482d4da3f9ad9b7ce0e8a673cc209498f5b568e4c400cbb8b537f8309e4d4595ee415803abae69c5fdc0a6b133678d96f4984b9412e1adbe81d49e3f91128093cbb46fed26a52ba992b1fea5c971fa2eb51be011c6fb2c8e504c8166ce77c1a0b72ef4c52e606acfe7695465524a8445886e9c912a781241ce447be8a95b5050836aaf70eba89aac4a93af4df8c596e4336b477c010041502212df95189347878dca75456f49564a60ce13ce6ee7396109b40d3643740072729506690750d882395e3ba1586c9de4e08c671373915c4b9d119eec10ff0466b4383f85d627a6cf74f080f8731ee87106b8701ce4047f761b472bc10c8174710b33474cf97c252a8b72b46f7b5f43c713ba1dd2a840ec9f60d8769bf09836e2976db2f8f063c1bf80ba8662e1e172f26c724117c1f740bd7fbbc8c0499bab331dac9edcf94d73ba50fb5119171a5f14f2616217a31f9748bfaec129f568f88e4f36c7011fdc4c65c106d88153ccc368746e50bde7f2e50369d2243195b594c1f095b5b68e7f75085fa973035b8597ab968a9be469c1b6ebf14b10697a5cf5ecb84f1c2ff3579aec67369fc1ff4b2ce8072487d5416b618b848e77ba15d1da6876345937aa5218994926c872a766930e8b8635546c09ca9c59afbc275e4dfc658a5c249e1c6d38f9d0652ee69bb87e6dd4c5ea93e425ca80afff2ff6d681fe57926f342318f247ed6593bd099dac5aa1cc98e080caa49aa625f2d204f48c946b49a26be7ee88d1cea44b47299da560c064a36787bd0ddb1efdc04b859f40cb2dcb5f40cb86316105a29abbf6792086c85c29b953a607695265b1a9c95ecf7b16348beb05eb4be7df75fd52bad780e5e966e5ba8321a465321b29fbac922f7588907caeef0b3d88c354b1d5cfe00f7b9282a746f92e0c067990ab3d85f4f944198034ba2cf6ea5572905128470e95f6989ea6e4e5a1ed865008475856bd2bd98d24888b464d131c18aa7943a61a70a1c1c1ca99ab823e97a0f7e5c7f2eac9a85152f76eeebfcc6a4df6f91097cfe8ea4709399a1d53b3516c6527d13ff6ed189080b46af3273bbd484b25448f303ccc5f25b63d930a526351a162ca008dae1edd36c2f1f7d19336d3f451a42a61826184f7b0b5df794ac47ee033375828a21c14f894293daf63cd500f7eb8cea477c1d1d63b6c24cff5b78c5cce6bb887fda181fb9366a2cfdb21f4c52a11152892969ec0425e9356d7db48b7fc9943530e737d5719eeaaf6e363f5fca18cdd9e0511e20ad18460e64beb088f1d721f5b8b42993f21743046a1b66764e1c454a0440e367ae24c5d3c8e330521618b1da0071445cf65b804b1ee534766e0c8ac1380844dfb85367339321675fadebad95baf4292678781182af736f74a7ae9138882754edbeeebd8a066a85b8907529af4c5d5928615698d74feafb8a2f4e9c07b13c51fb50889bc6e98b731c6c2df5a610a9542838efde7f522fbac8879d5717720bcaa536c276df19c3f8073a088f2686de7fbe11c4ed24cb234a4d41f19c310971ff0ead3380d6379e47d4f2f659f50a2df64410a6e852717e31d1009d7f964e29f6e1adc1431576a7147f7972f05a1ccfde0313c3a4d1c28967f93ff2626f8c3ded810bea1aba8c1f251c648372c2e6922dd414b9d0aa257519d933b03fb4fe2439eb2f8752a47bff42c290ebb13241b6a32b265f82799145db902742c52ae95e08b3b79e8d9a927207e71528d6adb991914baaa7431a0c2056b37d09e9ae8d741c539ae70bf242170d79287f0ee0ccc9bf573861bd2c2f5e948bcb15e6120fb5e64496afb0b7afb4ea80ffb4ba6ec44a0f9a8404ec6cf8ab161bb1a68e9db02dc671d2d3a70268cc3f382406cc04b2f720fa1c25ae73a5bda2679944858eb42a4e1357b299285ae2e99cca54f00a0392790a545d66f3910c22f9283be95cc1d02051a7ead78e78a79848fea1a65a773bfc6311cc3e5d48e4e65a99bc180981341f590f70bb387e0a786b2db574ed914e8c77c49fc510f761201c08f06dba3e03b0918ad606d0059d3ae6bfef39be8e1644f32299b44f579a4c9564a23d3a5baba2a8510f94f0f746d05a59bc77f61120337951a14efcd1d2d1d1ffe202b6ffd8b13f64f1b5a8d9bca8488b9fffa162b6080f6bdeec750da98d5c956dc91221af316d7cfe34851060b0aaa37defe6845311dc9f17fbce9de32a588c8a76f277092ac8eeeb387f8e600ac3065f3b4991da533ee9e4555775d741e6e7b63e542b06e5dee8daafb4dd2b7533ddc2f4d1eb0e52b069f089e912556c18eb675ba247558ec992f0234f7f05298e271ee1fa0616f8584086692abd336f20e555b8186642e1332688ab582040eb216228e29ee701f3301dfc95865cc857b95ccae77d5e905c39aa4576fcae3f36131361e678e83547c1387329784e376f3b843f8587e784f8f1b465af2bf66c1ac60755fd5a0a39afb56cf6e1567a5f40104cbc2c0333ffa23e646b5cda1bf6ee355472a4e8492dacc5f8349bdb1df296dcf8ca53fec69ca23796bd836775506b1e47479f0bc8c5db57ccff78c6cbebf0d7ec69a8d9458c06c97b2db18e40a4ca4081633830830955d46f3206449fe41387cdef0dc9bdae2dee26f4d6986e82516965f5960a1eea5e1e3fa506df1272b74148c3d50387d252e96019a8399efdd56ccda5d620ed57f013ce7f5c1bfa9520da35b6bb9228cc87cb2be888d2f6fc6c9326b2596a10863cfe59d4fb5115c3a78465e7b797c936144be3b725ef684565220e4dd5eb10d79ab19610390709d0385f4efdbea7480886efab0f01a21fe77f6ddc2a9afdc2e4e709bef3c2f70fddc6b382205e7e8f2992be26272e5f60f2ca6dc6c0a9bd51bf7766de297b543c3c13f626c22ce3ebfabe379cff05a17858d956cb3188e1140a8fc4d04a0cda02c1e5cfc08581fbb66b6e2d6660ef700d9c454994645fbaf97806576bca2983601276ca22831937083448b9c525dbe001482c9e26cd916f80c5bd98cd126ae441fbdfe7d62f08b8ba4f57da1c742b173fc31c5bbe38aa595698aff2005be8461cc85562f744974e2a171fdeff06ffeb7c0459263a70ff4d6c7b0a71af813ffeaa37e2544965078471f56524d80988d97d8bf784475ab9a2a51be67d3c6da03845d55e50896af01c419fa02da1ba60b80d335f607d30f8c4be4061c7761539bfd58e0765c39543003fa4180d926a4ce338fafe29dc65bf457f825ab0bbbcae8b28b8ac2737ae3e074daef922ab54262a93734f26580c3a151933bbf6aac57754d9e8935d9551b970650dfc44297f7603461c87ed24bedf8c346521da2348b769cf4dac9205c06792b99cb76ac3c7a545794f47ca3cc76c6364b4f940ee6100f8d39724256979cb570b22fd54565179df34ad19262e763ad17e96a624d9953bf602309a09c46611efe55c622b1fb2ea29eae708d7c52f741b577fec8e11064b9ecf8f8c2616473abdfb996a31668619ae81fca0484ae070256ecf13a5c9dee89b4b34cc40481c5d4075f8044697e5a63f351a412cf6608add7431b26eacfed65a4e2d0e941639c22091450c8cb0fee830bb42222e181cff53867ca272e28dbc61a6e07f641193fc887c94cd3d67e1ab16d18ddaba740c994fdee75f9033e55c30fbccd29d2416b4821d9f236706ac67963b595570872f4e7b554d17ba38ec7785e00dcf0a0e823c6eb6c724480252a7185b9abb7353af7db952310396943f1ce1818c456d8d69ab585d23ec953ff3027951acedf057f15adf629be6ce9e632b7ba0197cdaabb071f13decc30d85c8054892487a2e6e23200b68ecb4cdf548354b3b60b12b5bdf677c4f9f39b1b3ece64ce7fc2eb2f3a7b7ba83b9323843d06a5ba960e3777753992a74c6aa3019f4f5285e688f8b79f276b3d924eb04a27f2bc2078b7d38708eaeb5f59310b175ace9525fa754480516862e9c9cb6bc0eeffc93679e966c931fa17149eca07a7b6a6639ed9e65c7becb36a2a4621109aa0819f0eb2fde64246429daee7f14004a939d69635a2c4fcd1cdb72c37e67997c406b3c2543be1805ca308e1f6e5ba92484cfaf80df37ab6fcdc8bcf11077e004b0ddd0d107c2f32191b6ca674b53afeaba69af54d0b39d7ac87ec48b1819975bb647dc61e40983411062c0ec5edf104d156672982807a1998b3da6565ec7e7553c32d5963fda80efd5b6daa7205678959a8dae9a822beef3c743cb3149df2713b4e5b9e40b22972cbefec3dc810d8889bdb09f08c38612eeb12417c11aea83c554ebf859f97254f18be15c0f3b4f0ab78ca815aa10624368e4a90534e12221b7c04bb9e2eccd6a8f3fd482c806cd1d42279d7d8f08e6e04d034410405d916a596306b26ebadfade31b0bab9ba8a9a8ef50474e0b2d5cd4c5af429d0ca1edc1ff21eeeb9771ef42888f3c6cb8d00b17986570277f4871"}], 0x2008}}], 0x1, 0x0) [ 1166.837242][ T25] audit: type=1107 audit(1620942192.104:694): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='Ü' 21:43:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 21:43:12 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 21:43:12 executing program 2: r0 = socket(0x2, 0x3, 0x1) sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1166.902138][T18268] loop5: detected capacity change from 0 to 4 [ 1166.912111][T18268] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1166.924196][T18268] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:12 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x300, 0x0, 0x0) 21:43:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 21:43:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0e00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000010c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 21:43:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000080)=@ethtool_eee={0x44}}) 21:43:12 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, 0xfffffffffffffffe, 0x0) 21:43:13 executing program 1: creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009900), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7040) 21:43:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0f00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1167.702555][T18317] loop5: detected capacity change from 0 to 4 [ 1167.710139][T18317] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1167.722239][T18317] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:13 executing program 1: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x42, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRESDEC=r0], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x0, "00000007000000000000000900000000001000"}) 21:43:13 executing program 4: clone(0x80064000, &(0x7f0000000240)="2be8bcb233c6f0b130a1e782a388213faa34017576d9096549806e6e4a47fe924f27dc76d5c6c496d3bb47c9f7d87410c56295b9e046b35f3bb0b99b6d060000000000be074935cfec1a67558a0ae9a34b63990000f4e45a9a1161163f4c700473766cf959ed9ac4d6fda7793d9ce2e54b24a44ab4188cc4a5fcceb7ea9cdaba7275e06f1a9cf2fedfd700"/164, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000340)) 21:43:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xfd, &(0x7f0000000280)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1167.809695][T18332] loop5: detected capacity change from 0 to 4 [ 1167.824763][T18332] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1167.837409][T18332] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1167.890770][T18332] loop5: detected capacity change from 0 to 4 [ 1167.907468][T18332] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1167.919680][T18332] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:13 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x300, 0x0, 0x0) 21:43:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f070300000000000074ed27c1b3fe76ce384b1a6a722a3beaf52671", 0x1d) 21:43:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x30) 21:43:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a80)=[{{0x0, 0x0, 0x0}, 0xe95e}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000001c0)}}, {{&(0x7f00000019c0)=@rc={0x1f, @fixed}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004400)}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, &(0x7f0000006d00)={0x0, 0x989680}) 21:43:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x403ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbbfbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 21:43:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 21:43:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1168.136605][T18385] loop5: detected capacity change from 0 to 4 [ 1168.177723][T18385] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1168.190061][T18385] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xed, &(0x7f0000000280)="000000000000b50cec00050000000000000094bd9d45b0000000000000047d150801428a6a79940c9c0689bf74257a994a5cd7efad5175d8b454438488090804f443aa7ef6ee20c76b47e963c3ffe7365aba2063d1f69f3734a28a7e7d5dea167f8acc6439296b636226d39ad8b70ec8245cf266d26fbf76181616108401846eef0cb691b27fd4c537bb4c89a66cd5f09718ebd2d2595f8f3f023f7e4e88b6b7009b0cc5e0b52db8388ce6dd896dd0024e7083f34c69d42c6c7f0e25fcf20cf286894ee69e8fea4f4bd1cdc5cd1ad64a823872ea66d8682235a21f25e2fa75a849b5c8d5fc8c4c64cf13bc9eda"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:43:13 executing program 3: inotify_init() r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x80000001) [ 1168.236643][T18385] loop5: detected capacity change from 0 to 4 [ 1168.246174][T18385] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1168.258223][T18385] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syslog(0x2, &(0x7f0000001980)=""/168, 0xa8) 21:43:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_destroy(r1) 21:43:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1100000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:16 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4653600}}], 0x300, 0x0, 0x0) 21:43:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) [ 1170.873035][T18421] loop5: detected capacity change from 0 to 4 [ 1170.883609][T18421] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1170.896038][T18421] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5d5, 0x4) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffffd, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 21:43:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000000a06010800000000000000000300000708000940000010000800094000000004050001000700000009000273797a3200000000080082"], 0x74}}, 0x0) 21:43:16 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009900), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read(r0, &(0x7f0000000040)=""/71, 0x47) [ 1171.097830][T18421] loop5: detected capacity change from 0 to 4 [ 1171.113877][T18421] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1171.126054][T18421] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1200000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_destroy(r1) 21:43:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a00)={0x0}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) [ 1171.205415][T18449] loop5: detected capacity change from 0 to 4 [ 1171.223927][T18449] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1171.236012][T18449] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@fat=@uid}]}) 21:43:16 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009900), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read(r0, &(0x7f0000000040)=""/71, 0x47) 21:43:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) [ 1171.412423][T18449] loop5: detected capacity change from 0 to 4 [ 1171.426630][T18449] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1171.438903][T18449] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x6) keyctl$unlink(0x9, r1, r1) 21:43:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_destroy(r1) 21:43:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1400000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 21:43:17 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009900), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read(r0, &(0x7f0000000040)=""/71, 0x47) 21:43:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x248a, 0xa81) write$tcp_mem(r0, &(0x7f0000000080), 0x48) 21:43:17 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff}}], 0x300, 0x0, 0x0) 21:43:17 executing program 4: capget(&(0x7f00000000c0), 0x0) 21:43:17 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000009900), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read(r0, &(0x7f0000000040)=""/71, 0x47) [ 1171.825721][T18492] loop5: detected capacity change from 0 to 4 21:43:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 1171.904586][T18492] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1171.916652][T18492] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:17 executing program 4: socketpair(0x26, 0x5, 0x8, &(0x7f0000000000)) 21:43:17 executing program 2: syz_open_dev$rtc(&(0x7f0000000140), 0x9, 0x109300) 21:43:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_destroy(r1) [ 1172.108757][T18492] loop5: detected capacity change from 0 to 4 [ 1172.118104][T18492] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1172.130299][T18492] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:17 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x300, 0x0, 0x0) 21:43:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1900000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000340), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000010c0)="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", 0xfdef, 0xfbc}], 0x829400, &(0x7f0000000240)={[{@dots}, {@fat=@time_offset}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}], [{@appraise_type}, {@fowner_gt}, {@fowner_gt}]}) 21:43:17 executing program 4: mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) 21:43:17 executing program 1: socketpair(0x11, 0x2, 0xffff, &(0x7f00000002c0)) 21:43:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="a6c9d825a1096e82ab41647fcae1a5b3", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="a89f173810ba7fd99d9a2984e7d70be1", 0x10) 21:43:17 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000200)=@ipx, 0x23, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0, 0x0) [ 1172.437229][T18545] loop5: detected capacity change from 0 to 4 [ 1172.443397][T18546] loop2: detected capacity change from 0 to 134 [ 1172.459879][T18545] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1172.472236][T18545] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:17 executing program 3: syz_io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x0, 0x0) 21:43:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 1172.512770][T18546] loop2: detected capacity change from 0 to 134 21:43:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$unlink(0x9, r0, r1) 21:43:17 executing program 2: unshare(0x8000200) unshare(0x8040000) 21:43:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x8004, &(0x7f0000000780)={[{@fat=@dos1xfloppy}]}) 21:43:18 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80ffff}}], 0x300, 0x0, 0x0) [ 1172.663104][T18545] loop5: detected capacity change from 0 to 4 [ 1172.684639][T18545] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1172.696767][T18545] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1c00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x18}], 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 21:43:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) getpid() connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)="f1ba737337f94f5429759608656884ef7b30d1dc12415724c996d0b02e9fd0acce0555788227ecaa0db7ce8382440e947fcb0b68d7733d9c4a969de8a7da4b689c3a8a80876e31d7ae6b9f1f3a165e94314a9fefcf98b3410b5a090af6a3", 0x5e}, {0x0}, {&(0x7f0000000380)="f9afec2c9fdc65395dbd193b0881c4de897a6d64bd07f6b1e1c4b01210293e46c52a868c32ba9a334ed177721f4ec67034e5f3bc6de2ef1bf540e50eef4cb8842911c581e0b6", 0x46}, {&(0x7f0000001440)="862f5535ea5c672ec0c63916c3ca975121267b0a74f4e6b22b074efb859baee66c69d0d13ff346006b3d0cb37a96b27b5da8a27f5a23e976ca49e3595d6edb86c5b1b33174dd3190e085296cf46b184444ab47f9c46a8e07c2fd772030e14734f42f327086d06b1c27289421b8be7a85cc9b978d6bdc408a624aec9a42dab1b240953b3a07139aee14f27d13d42f1431b990fc3ed40f1914d641a5b2f876e342cdc0eed3585956d4c3423c183a0199dc0c538ed844962041bc1abf42e7f6f041fed2fe7948b458ff6fd2ecd4ea128133f741cd545a2c5da8", 0xd8}], 0x4, 0x0, 0x15c}, 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 21:43:18 executing program 3: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:43:18 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r0) 21:43:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x5, 0x4) 21:43:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, 0x15555358, &(0x7f0000000080)=[{&(0x7f00000010c0)="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", 0x1000, 0xfbc}], 0x829400, &(0x7f0000000240)={[{@dots}, {@fat=@time_offset}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}], [{@appraise_type}, {@fowner_gt}, {@fowner_gt}]}) 21:43:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x6) 21:43:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x9, 0x4) [ 1172.814360][T18602] loop5: detected capacity change from 0 to 4 [ 1172.832013][T18602] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1172.844149][T18602] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:18 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x100}]) 21:43:18 executing program 3: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140), 0x0, 0x0, 0x0) [ 1173.002366][T18602] loop5: detected capacity change from 0 to 4 [ 1173.015464][T18602] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1173.028637][T18602] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:18 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0ffff}}], 0x300, 0x0, 0x0) 21:43:18 executing program 4: io_uring_setup(0x5cfe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x283}) 21:43:18 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/nf_conntrack_expect\x00') pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 21:43:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000500)={'team_slave_0\x00', @ifru_data=&(0x7f00000004c0)="9ed36f8a7377af388b596b99093ebf835b9cb00ce5d0aee01e80268c15632f72"}) 21:43:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce2200000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1173.696812][T18642] loop5: detected capacity change from 0 to 4 [ 1173.741398][T18642] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1173.753544][T18642] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, 0x15555358, &(0x7f0000000080)=[{&(0x7f00000010c0)="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", 0x1000, 0xfbc}], 0x829400, &(0x7f0000000240)={[{@dots}, {@fat=@time_offset}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}], [{@appraise_type}, {@fowner_gt}, {@fowner_gt}]}) 21:43:19 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/28, 0x1c}, {0x0}, {&(0x7f0000000240)=""/232, 0xe8}], 0x3, &(0x7f0000000380)=""/236, 0xec}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x722b7552208fdb12, 0x0, &(0x7f0000000600)) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000500)=""/188, 0xbc, 0x121a3, &(0x7f0000000640)={0x11, 0x3, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002380)={@initdev}, &(0x7f00000023c0)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000002400)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x15, 0x8859, @l2={'eth', 0x3a, 'lo\x00'}}}}, ["", ""]}, 0x30}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:43:19 executing program 2: syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x109300) 21:43:19 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:19 executing program 2: mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 21:43:19 executing program 4: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0xb4197096fb285ddd, 0x0) [ 1173.904650][T18642] loop5: detected capacity change from 0 to 4 [ 1173.937862][T18642] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:19 executing program 2: io_uring_setup(0x5cfe, &(0x7f0000000ac0)={0x0, 0x0, 0x8}) [ 1173.950043][T18642] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:19 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x300, 0x0, 0x0) 21:43:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) 21:43:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce2500000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:19 executing program 4: openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) 21:43:19 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) [ 1174.112711][T18686] loop5: detected capacity change from 0 to 4 [ 1174.144948][T18686] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1174.157081][T18686] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1174.307602][T18686] loop5: detected capacity change from 0 to 4 [ 1174.317835][T18686] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1174.330433][T18686] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:20 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000980)={[{@size={'size', 0x3d, [0x65]}}, {@huge_never}, {@huge_within_size}]}) 21:43:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 21:43:20 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) 21:43:20 executing program 1: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 21:43:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce2700000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x300, 0x0, 0x0) 21:43:20 executing program 2: add_key$fscrypt_v1(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 21:43:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') write$cgroup_pid(r0, 0x0, 0x0) 21:43:20 executing program 4: clock_getres(0x734e967fc1b0d5c8, 0x0) [ 1174.804635][T18713] tmpfs: Unsupported parameter 'huge' [ 1174.813386][T18713] tmpfs: Unsupported parameter 'huge' [ 1174.841939][T18721] loop5: detected capacity change from 0 to 4 21:43:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) 21:43:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$tcp_mem(r0, 0x0, 0x7) 21:43:20 executing program 4: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, 0x0) 21:43:20 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040), &(0x7f00000000c0)=0x8) [ 1174.897506][T18721] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1174.909718][T18721] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:20 executing program 4: io_uring_setup(0x1575e, &(0x7f0000000040)={0x0, 0x0, 0x35}) 21:43:20 executing program 1: r0 = openat$tcp_mem(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = dup3(r1, r0, 0x0) write$eventfd(r2, &(0x7f0000000040)=0x2d, 0x8) 21:43:20 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "083ff3d7cdbf336dc5e7eb99e0961e71e80939d1b990f9e0158241d68e1b15f3f3fb5240b91dbf59d7f1918dcd72faf1219ecd16ef14d1e1af2436543f535d3c"}, 0x48, 0xfffffffffffffffb) [ 1175.098761][T18721] loop5: detected capacity change from 0 to 4 [ 1175.109352][T18721] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.121523][T18721] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0}}, 0x0) 21:43:20 executing program 4: io_uring_setup(0x1575e, &(0x7f0000000040)={0x0, 0x0, 0x35}) 21:43:20 executing program 2: r0 = openat$tcp_mem(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = dup3(r1, r0, 0x0) write$eventfd(r2, &(0x7f0000000040), 0x8) 21:43:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x8004, &(0x7f0000000780)={[{@fat=@dos1xfloppy}], [{@fowner_gt}]}) 21:43:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce2e00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}}], 0x300, 0x0, 0x0) 21:43:20 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '\\,\x84}[-'}, 0x1f, 0x0) 21:43:20 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) rt_tgsigqueueinfo(0x0, 0x0, 0x20, &(0x7f0000000340)={0x11, 0x1000005}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) rt_sigtimedwait(0x0, &(0x7f0000000840), 0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81804, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) 21:43:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$tcp_mem(r0, 0x0, 0x0) 21:43:20 executing program 3: mq_open(&(0x7f0000000100)='/&-\x00', 0x0, 0x0, &(0x7f0000000140)) 21:43:20 executing program 4: io_uring_setup(0x1575e, &(0x7f0000000040)={0x0, 0x0, 0x35}) [ 1175.289361][T18774] loop5: detected capacity change from 0 to 4 [ 1175.298655][T18774] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.310720][T18774] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce4500000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1175.375176][T18774] loop5: detected capacity change from 0 to 4 [ 1175.382130][T18774] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.394474][T18774] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100), 0x4) 21:43:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 21:43:20 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0xffffffffffffffff) [ 1175.456314][T18804] loop5: detected capacity change from 0 to 4 21:43:20 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') timerfd_settime(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 21:43:20 executing program 4: io_uring_setup(0x1575e, &(0x7f0000000040)={0x0, 0x0, 0x35}) [ 1175.508260][T18804] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.520518][T18804] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc0fe}}], 0x300, 0x0, 0x0) 21:43:20 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x3}) 21:43:20 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) add_key(&(0x7f0000002d80)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 21:43:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 21:43:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1175.590987][T18804] loop5: detected capacity change from 0 to 4 [ 1175.598217][T18804] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.610349][T18804] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce4800000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0) 21:43:21 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000600), 0x400, 0x0) 21:43:21 executing program 3: r0 = io_uring_setup(0x2485, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000300), 0x1) 21:43:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0xc0101, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000140)={0x7}, 0x7) 21:43:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000340), 0x0, 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f00000010c0)="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", 0xe50, 0xfbc}], 0x829400, &(0x7f0000000240)={[{@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x380}}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}], [{@appraise_type}, {@fowner_gt}, {@fowner_gt}]}) [ 1175.725478][T18845] loop5: detected capacity change from 0 to 4 [ 1175.752355][T18845] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.764675][T18845] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:21 executing program 2: mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)) [ 1175.857247][T18845] loop5: detected capacity change from 0 to 4 [ 1175.864642][T18845] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1175.876698][T18845] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:21 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x300, 0x0, 0x0) 21:43:21 executing program 4: keyctl$assume_authority(0x10, 0x0) add_key(&(0x7f0000002d80)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 21:43:21 executing program 3: add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 21:43:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 21:43:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce4c00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:21 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:21 executing program 3: openat$thread_pidfd(0xffffff9c, 0x0, 0x402283, 0x0) 21:43:21 executing program 4: faccessat(0xffffffffffffff9c, 0x0, 0x189) [ 1176.158959][T18884] loop5: detected capacity change from 0 to 4 [ 1176.190812][T18884] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1176.202865][T18884] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:21 executing program 3: clone(0x8082500, 0x0, 0x0, 0x0, 0x0) [ 1176.374731][T18884] loop5: detected capacity change from 0 to 4 [ 1176.381930][T18884] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1176.394263][T18884] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:22 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') write$tcp_mem(r0, &(0x7f0000000700), 0x48) 21:43:22 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}], 0x300, 0x0, 0x0) 21:43:22 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce6000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:22 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:22 executing program 3: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) 21:43:22 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x114031, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) [ 1176.763885][T18923] loop5: detected capacity change from 0 to 4 21:43:22 executing program 3: r0 = openat$tcp_mem(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup3(r1, r0, 0x0) 21:43:22 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:22 executing program 1: syz_open_dev$rtc(&(0x7f0000000140), 0x9, 0x0) [ 1176.807885][T18923] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1176.811098][T18934] 9pnet_virtio: no channels available for device /dev/sg0 [ 1176.821287][T18923] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1176.841751][T18935] 9pnet_virtio: no channels available for device /dev/sg0 21:43:22 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:22 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) 21:43:22 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:22 executing program 1: setitimer(0x0, &(0x7f0000001540)={{}, {0x0, 0x2710}}, 0x0) [ 1176.956994][T18923] loop5: detected capacity change from 0 to 4 [ 1176.976376][T18923] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1176.988670][T18923] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:22 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 21:43:22 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000002040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x20b4, &(0x7f0000000200), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:43:22 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 21:43:22 executing program 2: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x722b7552208fdb12, &(0x7f00000005c0)={@private2}, &(0x7f0000000600)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a00)={0x0}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) 21:43:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce6800000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:22 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 21:43:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce6c00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001700)='ns/mnt\x00') [ 1177.154981][T18972] loop5: detected capacity change from 0 to 4 [ 1177.162381][T18972] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1177.174439][T18972] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:22 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7ff}, &(0x7f0000000040)) 21:43:22 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x1400, &(0x7f00000004c0)) [ 1177.254837][T18988] loop5: detected capacity change from 0 to 4 21:43:22 executing program 3: capget(0x0, &(0x7f0000000100)) 21:43:22 executing program 4: openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0) 21:43:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) [ 1177.294886][T18988] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1177.307923][T18988] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:22 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x9, 0x5, 0x4, 0x0, 0x20000000000, 0x4400, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x330, 0x400, 0x9, 0x8, 0x1, 0x6, 0x1, 0x0, 0x4a4eb4f0, 0x0, 0x6}, r1, 0xa, r0, 0x9) rseq(0x0, 0x0, 0x0, 0x0) ptrace$cont(0x7, r1, 0x7000000000000, 0xc33b) r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) r4 = getpid() sendmmsg$unix(r3, &(0x7f0000003c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x18, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r4}}}], 0x30}], 0x1, 0x0) getpriority(0x1, r4) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x9, 0x856, 0x20}, 0x4}, 0x20, 0x1, 0x0) syz_read_part_table(0xcdf50707, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020306af54061400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) sched_setparam(0x0, &(0x7f0000000000)=0x9) 21:43:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) 21:43:22 executing program 1: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x80002, 0x0) 21:43:22 executing program 3: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) [ 1177.378614][T18988] loop5: detected capacity change from 0 to 4 [ 1177.389225][T18988] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1177.401402][T18988] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:22 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x300, 0x0, 0x0) 21:43:22 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, 0x0}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={&(0x7f0000002980), 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x30, 0x0, 0x0, 0x70bd25, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}, ["", ""]}, 0x30}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) add_key(&(0x7f0000002d80)='dns_resolver\x00', &(0x7f0000002dc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000003040)={&(0x7f0000002f80), 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) 21:43:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 21:43:22 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x18}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 21:43:22 executing program 1: add_key(&(0x7f0000002d80)='dns_resolver\x00', 0x0, &(0x7f0000002e00)='h', 0x1, 0xfffffffffffffffe) 21:43:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce7400000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:22 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0) 21:43:22 executing program 2: r0 = openat$tcp_mem(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000200), 0x48) 21:43:22 executing program 4: io_uring_setup(0x0, &(0x7f0000000ac0)) 21:43:22 executing program 3: recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002a40)={&(0x7f0000002980), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) add_key(&(0x7f0000002d80)='dns_resolver\x00', &(0x7f0000002dc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1177.573891][T19039] loop5: detected capacity change from 0 to 4 [ 1177.592833][T19039] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1177.604904][T19039] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1177.696647][T19039] loop5: detected capacity change from 0 to 4 [ 1177.723776][T19039] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 21:43:23 executing program 4: io_uring_setup(0x5cfe, &(0x7f0000000ac0)) [ 1177.735859][T19039] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:23 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x300, 0x0, 0x0) 21:43:23 executing program 1: migrate_pages(0xffffffffffffffff, 0x3ff, &(0x7f0000000000), &(0x7f0000000040)=0xa69) 21:43:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:43:23 executing program 3: socketpair(0x2d, 0x0, 0x0, &(0x7f0000000000)) 21:43:23 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'cpu'}]}, 0x5) 21:43:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce7a00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:23 executing program 4: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x200400, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 21:43:23 executing program 3: io_uring_setup(0x535b, &(0x7f0000000080)={0x0, 0x0, 0x4}) [ 1178.499856][T19087] loop5: detected capacity change from 0 to 4 [ 1178.532899][T19087] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) 21:43:23 executing program 2: mq_open(&(0x7f00000000c0)='.\x01\x00\x00\x00(\x00aG=HlrnH\xde\x92\xe9\x14T\x1cgT\xe7#\xe9\xaev\x193\xcd\'\xa9\xa7\xa2\xe1\a\t\x11*wG\xaa\xf1\xb5\xb8n*\xd8\xd3<\xed..\x04\xb0\xa6\xc6\x86\x88\a\x8e\xaa\x10\t?\xef\x18[l[A\xb7?\xce\xe1\xf4-k\xbb\x94]$\xc7J\x82\xfd\xcb\xbb\x1c1!\xcd\xfc\xda\xaa\x1a\xef\apZ\x1b\xa9\x06\xd5\xcaga5\x05\xfe\\\xafs\xb1>cwB\xf8\xdf\x88s\x9d_\x9dj\xe4l\xb7\x8d{2\xe0G\xc6\xe0\x18L\xd6\x1a/\x1b\x87G\xae\x1cR\x93>\x16W\x1fnfg\x1b\xd0I\xe9t|:\x01\x8b\xfb\x86\x9bK\x80X\xf6\x01CM\x19{G\xa1\xe5W!{,\xb7c\xf1', 0x0, 0x0, 0x0) [ 1178.545761][T19087] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, 0x15555358, &(0x7f0000000080)=[{&(0x7f00000010c0)="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", 0x1000, 0xfbc}], 0x829400, &(0x7f0000000240)={[{@dots}, {@fat=@time_offset}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}], [{@appraise_type}, {@fowner_gt}, {@fowner_gt}]}) 21:43:23 executing program 3: io_uring_setup(0x535b, &(0x7f0000000080)={0x0, 0x0, 0x4}) [ 1178.660238][T19087] loop5: detected capacity change from 0 to 4 [ 1178.668906][T19087] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1178.681061][T19087] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:24 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x300, 0x0, 0x0) 21:43:24 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x26802) write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'w\x00'}, 0x8) 21:43:24 executing program 3: io_uring_setup(0x535b, &(0x7f0000000080)={0x0, 0x0, 0x4}) 21:43:24 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) rt_tgsigqueueinfo(0x0, 0x0, 0x20, &(0x7f0000000340)={0x11, 0x1000005}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)) waitid(0x2, 0x0, &(0x7f00000003c0), 0x20000008, &(0x7f0000000640)) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) r2 = creat(0x0, 0xbc9dc8fbd81cb4a1) ftruncate(r2, 0x0) ftruncate(0xffffffffffffffff, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81804, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) 21:43:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0402000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:24 executing program 3: io_uring_setup(0x535b, &(0x7f0000000080)={0x0, 0x0, 0x4}) [ 1178.944844][T19129] loop5: detected capacity change from 0 to 4 [ 1178.996610][T19129] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1179.008709][T19129] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1179.047777][T19129] loop5: detected capacity change from 0 to 4 [ 1179.058097][T19129] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1179.070175][T19129] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:24 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r0) 21:43:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816e000) waitid(0x2, 0x0, 0x0, 0x8, 0x0) 21:43:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 21:43:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0003000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) iopl(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) 21:43:24 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x300, 0x0, 0x0) 21:43:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000000), 0x4) [ 1179.609575][T19160] loop5: detected capacity change from 0 to 4 [ 1179.640387][T19160] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:24 executing program 2: capget(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 1179.653679][T19160] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x401870cb) 21:43:25 executing program 2: io_uring_setup(0x45e2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffff9}) 21:43:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x32, 0x0, &(0x7f0000000040)) 21:43:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x1263) 21:43:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0204000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1179.725712][T19160] loop5: detected capacity change from 0 to 4 [ 1179.735227][T19160] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1179.747377][T19160] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1600bd78, 0x0, &(0x7f0000000040)) 21:43:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a09", 0xb, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) 21:43:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0) 21:43:25 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000010c0)="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", 0x77c, 0xfbc}], 0x829400, &(0x7f0000000240)={[{@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x380}}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}], [{@appraise_type}, {@fowner_gt}, {@fowner_gt}]}) [ 1179.842718][T19200] loop5: detected capacity change from 0 to 4 [ 1179.851314][T19200] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1179.863728][T19200] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1179.931805][T19214] loop2: detected capacity change from 0 to 15 [ 1179.966689][T19200] loop5: detected capacity change from 0 to 4 [ 1179.973528][T19200] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1179.986109][T19200] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1180.051844][T19214] loop2: detected capacity change from 0 to 15 21:43:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0xd, 0x0, 0x7) 21:43:25 executing program 3: syz_io_uring_setup(0x4619, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 21:43:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac060000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf2503000000080001"], 0x6ac}}, 0x0) 21:43:25 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfc}], 0x300, 0x0, 0x0) 21:43:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)='\n', 0x1}, {&(0x7f0000000140)="f0", 0x1}], 0x3}}], 0x1, 0x2400c000) 21:43:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0604000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:25 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) 21:43:25 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x418880) 21:43:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x24}}, 0x0) [ 1180.513079][T19239] loop5: detected capacity change from 0 to 4 [ 1180.534322][T19239] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1180.546401][T19239] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:25 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 21:43:25 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x10000000) 21:43:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f0000000040)) 21:43:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) 21:43:26 executing program 3: socketpair(0x25, 0x0, 0x0, &(0x7f0000000140)) 21:43:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x22, 0x0, &(0x7f0000000040)) [ 1180.651729][T19239] loop5: detected capacity change from 0 to 4 [ 1180.662112][T19239] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1180.674362][T19239] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:26 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x700}], 0x300, 0x0, 0x0) 21:43:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 21:43:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_SOPASS={0xb, 0x3, "0cc8450d6b63d1"}]}, 0x20}}, 0x0) 21:43:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100), 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 21:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1004000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:26 executing program 3: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgsnd(0x0, &(0x7f0000000480)={0x2, "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"}, 0x3fe, 0x0) 21:43:26 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) [ 1181.458923][T19297] loop5: detected capacity change from 0 to 4 [ 1181.467962][T19297] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1181.480068][T19297] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0005000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'macvlan1\x00', @ifru_flags}) 21:43:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) 21:43:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') 21:43:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0006000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1181.631782][T19328] loop5: detected capacity change from 0 to 4 [ 1181.648278][T19328] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1181.660431][T19328] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1181.726664][T19328] loop5: detected capacity change from 0 to 4 [ 1181.739392][T19328] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1181.751570][T19328] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:27 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x300, 0x0, 0x0) 21:43:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x801012ee) 21:43:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080), 0x4) 21:43:27 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 21:43:27 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "8b47e397dc70562fe8909fed050deaa25388715e91b9157800047a0b1df90b23b1f0ba3e296e033e2237df30bf0a1c4ebb230984bc9db178a0dd889d2fe7f169b919a147a6b0b8bf489a9d861f9ff8083417deed42ae7ab1412020c9c993a1abf8ad36c117c372df4571a9daa363cd587e28b305164ff5e947a0c71fbf86b4e2695402b2419016edc9e90606329c38189d160cdff6cce873d2a14046c4726ec048e1f2"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "a63e9e9fb3ff2702bc255663cf94c998391f74608458a49e0fb7ad7b69a198bbae610a25a9a985902ea6c57f4c374ff2981a73cb8537108aa5b40061782112cab53ed581f530a5a9358d3b61b7a46f7175582be4792841d5bea5371de93edc119a53dd6f5a635040e5bf53e5f1d5f8e4ec3576f476a1a6e8cf64c3af30495de5c8cda18dec15830fabb0d8e604b4450f41e2c41e4c93afbeba253ff9dafcfda1e32140d151b12c083a8924d2f68e527debab24406dd9ae185aac7e7c2a6af0e23254a4b23e6a7f5fed081386f09981dbb7c97da3ea45603a33"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "492d1b8ad0a3534b6e5911fb15d11a5027f59b0b622d88b60257bfd05b2a1a4e3af36bac4126c685716ffa2669267a699a78ed24c20adea813a1c39f8837059fa084868b52d158fdb57341a495373d6a3cb036860903196a418ca7c43901906dc6b25f66e2fb8e68bcc1647b353c5e5c84c64889a5a2436b3ec81a895c19bb2a262a82dcb0e60d9d6ce161e6c760"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "890945c86554cdfc690298a0a8994437fb4b3ce8a28d00e10473da2eb0513391758f49302569deaa6a9930123cfe3f6bdcf34484374497b650489f3a94a6ce26d6e8f43d74ebd26594282676e21dd9b1312b102c3789b93e3791a26af55c3e719ebe611c701a2b3181892ebcb9bae88987bf38008344b87a8851d8da6bd1cb4a71c20d0c650fa1b7abcd9062ebc57bbaaa5b36bccee044027fd6db5c6f5bbd3440e2d2be32a83011eadb06c0db445290878f635dd0c7a7d9ef7e214d3f67a3461206b3c252b7268235ac25065342b66923411cb7814d6c9e902175630f07f823d851bbd749af54e126acf3"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "a4c94628641e7d58f1e25364459fe360098bacad238fdd5068f9b5796c609395328ed6f60b1a4d48a1528a38c30d10bd325bc78d578d625a2685a5e3ee"}, @INET_DIAG_REQ_BYTECODE={0xb25, 0x1, "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"}]}, 0xec4}}, 0x90) 21:43:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0406000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:27 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}], 0x20}, 0x0) [ 1182.366134][T19347] loop5: detected capacity change from 0 to 4 [ 1182.396245][T19347] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:27 executing program 2: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0xff0f, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[{@sbsector}]}) 21:43:27 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f00000027c0), 0x4900, 0x0) 21:43:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x8001) [ 1182.408314][T19347] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001940)={0x1, &(0x7f0000001900)=[{0x35}]}) 21:43:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0007000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1182.534729][T19378] loop5: detected capacity change from 0 to 4 [ 1182.567245][T19378] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1182.579307][T19378] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1182.681483][T19378] loop5: detected capacity change from 0 to 4 [ 1182.688970][T19378] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1182.701131][T19378] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:28 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x4000}], 0x300, 0x0, 0x0) 21:43:28 executing program 1: socketpair(0x0, 0xb, 0x0, &(0x7f0000000080)) 21:43:28 executing program 3: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x1e89bc00d19dc597) 21:43:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x14}) 21:43:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0009000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="92", 0x1}], 0x1}, 0x0) 21:43:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x2, &(0x7f0000000080)=0xab, 0x4) [ 1182.851122][T19400] loop5: detected capacity change from 0 to 4 [ 1182.871816][T19400] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1182.883872][T19400] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1182.914729][T19400] loop5: detected capacity change from 0 to 4 [ 1182.924519][T19400] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1182.936593][T19400] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1183.033459][T19372] ISOFS: Unable to identify CD-ROM format. 21:43:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x4000000, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[{@sbsector}, {}, {@block}, {@gid}]}) 21:43:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0xab, 0x4) 21:43:28 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x204400, 0x0) 21:43:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000a000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:28 executing program 1: pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0x3938700}, 0x0) 21:43:28 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfc00}], 0x300, 0x0, 0x0) [ 1183.232632][T19431] loop5: detected capacity change from 0 to 4 21:43:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x38}], 0x1, 0x0) 21:43:28 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) [ 1183.272540][T19431] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1183.285267][T19431] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) 21:43:28 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000005c0)={[{@session}]}) 21:43:28 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) pipe2(&(0x7f0000000840), 0x0) [ 1183.349927][T19431] loop5: detected capacity change from 0 to 4 [ 1183.372200][T19431] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1183.384578][T19431] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000b000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1183.488154][T19463] loop5: detected capacity change from 0 to 4 [ 1183.497245][T19463] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1183.509288][T19463] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1183.607382][T19463] loop5: detected capacity change from 0 to 4 [ 1183.621591][T19463] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1183.633851][T19463] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:29 executing program 2: r0 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x3, r0, 0x0) 21:43:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 21:43:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b45", 0x37}], 0x1) 21:43:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000080), 0x4) 21:43:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:29 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xff00}], 0x300, 0x0, 0x0) 21:43:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x1000}, &(0x7f0000000080)=0x92a3c4fd7f21141) 21:43:29 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 21:43:29 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) [ 1184.191084][T19485] loop5: detected capacity change from 0 to 4 [ 1184.200427][T19485] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1184.212548][T19485] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:29 executing program 4: syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x4d90}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 21:43:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000d000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1b, 0x9, 0x4a, &(0x7f0000000180)="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"}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000600)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6a", 0x3e}], 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000010c0)={0x4, 0x80, 0x23, 0x6, 0x7, 0x0, 0x0, 0x3, 0x20205, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3a54, 0x7}, 0x4001, 0x3, 0x6, 0x4, 0x401, 0x9, 0x101, 0x0, 0x2, 0x0, 0x1f}, 0xffffffffffffffff, 0xb, r1, 0x1) dup(0xffffffffffffffff) 21:43:29 executing program 3: clock_adjtime(0x0, &(0x7f00000000c0)={0x4}) [ 1184.271470][T19485] loop5: detected capacity change from 0 to 4 [ 1184.283786][T19485] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1184.295994][T19485] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:29 executing program 4: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x70cfd70d8d4e7618) 21:43:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001b00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x14}, 0x14}}, 0x0) 21:43:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1184.374855][T19516] loop5: detected capacity change from 0 to 4 [ 1184.399173][T19516] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1184.411248][T19516] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:29 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, 0x15, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) [ 1184.464943][T19516] loop5: detected capacity change from 0 to 4 [ 1184.499629][T19516] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:29 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x40000}], 0x300, 0x0, 0x0) 21:43:29 executing program 2: pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 21:43:29 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000027c0), 0x0, 0x0) 21:43:29 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 21:43:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x14, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)}) [ 1184.511871][T19516] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:29 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x453, 0x0, 0x0, 0x0, 't'}, 0x14}}, 0x0) 21:43:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000e000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x1018002, &(0x7f00000008c0)) 21:43:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x14}, 0x14}}, 0x0) 21:43:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1600bd74, &(0x7f0000000080), 0x4) [ 1184.652242][T19557] loop5: detected capacity change from 0 to 4 [ 1184.658933][ T25] audit: type=1107 audit(1620942209.963:695): pid=19553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='t' 21:43:30 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2}, {}], 0x2, &(0x7f0000000040)) 21:43:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000080), 0x4) [ 1184.704636][T19557] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1184.716800][T19557] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1184.842800][T19557] loop5: detected capacity change from 0 to 4 [ 1184.858307][T19557] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1184.870391][T19557] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:30 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x200000}], 0x300, 0x0, 0x0) 21:43:30 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f0000001140)=[{0xba63}]}) 21:43:30 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}, 0x0) 21:43:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) 21:43:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0) 21:43:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000f000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x0) 21:43:30 executing program 2: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x101800b, &(0x7f00000008c0)) 21:43:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1, 0x7f, 0x0, 0x81}, {0x2, 0x0, 0x0, 0x78e0}]}) 21:43:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 1185.019537][T19598] loop5: detected capacity change from 0 to 4 [ 1185.036561][T19598] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1185.049827][T19598] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) 21:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={0x0, 0x8e}}, 0x0) [ 1185.099221][T19598] loop5: detected capacity change from 0 to 4 [ 1185.116088][T19598] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1185.128178][T19598] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:30 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x3665c4}], 0x300, 0x0, 0x0) 21:43:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x21, &(0x7f00000008c0)) 21:43:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) 21:43:30 executing program 4: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) 21:43:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) 21:43:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0410000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:30 executing program 1: setpriority(0x2, 0x0, 0xffffffffffffff63) 21:43:30 executing program 4: socketpair(0x10, 0x3, 0x7fffffff, &(0x7f0000000000)) 21:43:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={0x0}}, 0x20044881) [ 1185.371078][T19643] loop5: detected capacity change from 0 to 4 21:43:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x7, &(0x7f0000000080), 0x4) 21:43:30 executing program 4: clock_gettime(0x4, &(0x7f0000000300)) 21:43:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080), 0x3) [ 1185.411487][T19643] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1185.423698][T19643] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1185.514800][T19643] loop5: detected capacity change from 0 to 4 [ 1185.530661][T19643] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1185.542829][T19643] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:30 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x300, 0x0, 0x0) 21:43:30 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) 21:43:30 executing program 1: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[{@sbsector}]}) 21:43:30 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) 21:43:30 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)={0xec4, 0x13, 0x2, 0x70bd2d, 0x25dfdbfc, {0x3, 0xff, 0x3f, 0xff, {0x4e23, 0x4e20, [0x7, 0x894, 0x401, 0x7], [0x5000, 0xa47, 0xfffffff9, 0x681], 0x0, [0x8de]}, 0x1, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "8b47e397dc70562fe8909fed050deaa25388715e91b9157800047a0b1df90b23b1f0ba3e296e033e2237df30bf0a1c4ebb230984bc9db178a0dd889d2fe7f169b919a147a6b0b8bf489a9d861f9ff8083417deed42ae7ab1412020c9c993a1abf8ad36c117c372df4571a9daa363cd587e28b305164ff5e947a0c71fbf86b4e2695402b2419016edc9e90606329c38189d160cdff6cce873d2a14046c4726ec048"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "a63e9e9fb3ff2702bc255663cf94c998391f74608458a49e0fb7ad7b69a198bbae610a25a9a985902ea6c57f4c374ff2981a73cb8537108aa5b40061782112cab53ed581f530a5a9358d3b61b7a46f7175582be4792841d5bea5371de93edc119a53dd6f5a635040e5bf53e5f1d5f8e4ec3576f476a1a6e8cf64c3af30495de5c8cda18dec15830fabb0d8e604b4450f41e2c41e4c93afbeba253ff9dafcfda1e32140d151b12c083a8924d2f68e527debab24406dd9ae185aac7e7c2a6af0e23254a4b23e6a7f5fed081386f09981dbb7c97da3ea45603a33"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "492d1b8ad0a3534b6e5911fb15d11a5027f59b0b622d88b60257bfd05b2a1a4e3af36bac4126c685716ffa2669267a699a78ed24c20adea813a1c39f8837059fa084868b52d158fdb57341a495373d6a3cb036860903196a418ca7c43901906dc6b25f66e2fb8e68bcc1647b353c5e5c84c64889a5a2436b3ec81a895c19bb2a262a82dcb0e60d9d6ce161e6c7"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "890945c86554cdfc690298a0a8994437fb4b3ce8a28d00e10473da2eb0513391758f49302569deaa6a9930123cfe3f6bdcf34484374497b650489f3a94a6ce26d6e8f43d74ebd26594282676e21dd9b1312b102c3789b93e3791a26af55c3e719ebe611c701a2b3181892ebcb9bae88987bf38008344b87a8851d8da6bd1cb4a71c20d0c650fa1b7abcd9062ebc57bbaaa5b36bccee044027fd6db5c6f5bbd3440e2d2be32a83011eadb06c0db445290878f635dd0c7a7d9ef7e214d3f67a3461206b3c252b7268235ac25065342b66923411cb7814d6c9e902175630f07f823d851bbd749af54e126"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "a4c94628641e7d58f1e25364459fe360098bacad238fdd5068f9b5796c609395328ed6f60b1a4d48a1528a38c30d10bd325bc78d578d625a2685a5e3ee"}, @INET_DIAG_REQ_BYTECODE={0xa59, 0x1, "a5149b1dacc77f56db2ccbb934a0596bdf149810c05605ef38bc5e4ad37d1fb51972a4233ced9d57c2a0f9c81d48858168383d9d91d7d91b0852a54f64519593264157fa43327e75f5f270da7789540f1e966095c8878944a16b8cd7afbdf7607179bb2be161c8fec504d1f9a959f8d36bbe898e52654257a35c69fe41a1c53e5f3d0ed7249c6b69e35089ae7517b65617d7001eab8e02fb989fbfaf13d60c58d05de3cff64ee32868acd6592323244818a7dd68d1540f81a0c3e151ad0f4a5c509638cb416da96d356c0281242ebee5dd6463e25f88c11dc308bb87e47421354a3d168dc465fcce56305f0cb3275950b678fcff736da5244840e8e0ea2ef8cf8a26234b033204d8911d010af9d0730277c137b15561e1c37375546c1b35cc33bc72eca83fd01b910738807cb3499aca1db5cda63aa5ce4b06e9f2b07c62f4171db58aecca9bd44c6d7aa8b6f1a9ef341ca6b0816e291a68409d73272d4865db831c90938bfabe388776b8bcfd878ff4618cea75dcda00fab6db67058be2481fa154a21a94e9e3b5be594d1430e99b8b6b75f6fe7cddff4657d05bac2a20b0cd8ae6ede3c6ad9018fe2ceaf256745a3a2846b29935166643d4c58b6a26f78c9523faae2f5c55d7dcf085e7e19c7e1f709783fbec719535167387fd10a39fae422011d4b1be2ebf863128bdce65736665b46668af1b45660b00354d79a1d25fe389aecd6befdf0ac95c2dd52d4cddbbd39638d34a726dd8efff21a5c358cbbcf2b69650afab0c87ad1deecb287c490a799319300e60afdd6291157c8f01e63cf608913689d0c8497f6cc9281db2e2c0faad9f6a40cf42763b584f53d5d5007d9548b7c35c49ee80f6950b57a8c887b444ef1c2c51e990eaf7f5e5c08c391d3ca86705af26627932c29aafa3844d1064b058dff233f16e05ec0764a8b266c67cc1cdc36f3a30fa53f539c7aad2357f30ce63ea7cb56a50f131848b039aaf4dd5cbb4e37293fbfd142b48a6bf35c31fcbf853ad8801959eac7b385983288261bc7eaea65b1f89dcfe1966fd36732859f6c61a21307f3fc0295826f0d7d0a472cc36c298365efefe6dceb7d68e709cc51b778b66169fc0ff61aa8c3d7e823c963a0b6acf0314b81bda0e5b02a2c9f217b099561a78af386c2a4ab6d876af9c9e7e55b6aaa6f4735d7d3392f0222fb65b36f36e0490a9f675ec92bf55aa134babb24a20d0ea6e73d41b0759595a4ca64903f556806819be2bb1f36be97772de94ba70b7dcc46c210522f12f756273d5d4e75a5e34abeacc31c538ac8d6020e642288166e2cbbdcfc6ba7366b01b995b56fa99677d45de644a639392adefd81b9b5bb4eaf47d07b0298878a73c4701213e4236579e594e6efbf7ca06afab4a180b3f6d4cf5c71dea78546bd4866eb4121ded28f4a4a4d7fd882355eac2a96194d82680ad0804f62ccfd9288411e22e45ffacf47c75326b75644242944340b568295a3f71399673f598db512f731e1a015b06d28e65bb74a9ee324e9559134669a159d1ab2acb37def8f25b7273a6dc23020333bb1e59c239d9687d68e06ac302153ec0a13c708089013e49bf9582f7f1067f4982f31b5ddb4cc31a28fe1db218623bb98ba630132645d9cee23711f4bce80e4d89e8ea251bfe67b306ac05635912caf0eb94be7cb216b03102d5aa1302a63cd520d0239bff450212c2b985f19ad9eb42512bda8ecde440f89fea55b85fcfe04ad0174567989a207d5e67c9811e5de6aa3b07c5bcc7a1be927aaa33f95b7cbc984c3f29b98bef645ccf7c38d47a8fdfbaec64ded4d1517e5c1d9495dfe1c4a78a6a29bd6f461e015db387ab927c1aca60d8ef082d6889908ae9537904d53322aeecfa3b2b11a11314abb39ca17cbedab578e9854451a807994bcbcd3b9f5f6773f2dbaa0af70850194b4a444b4eef38c6cbf27d58c0a7a82054f75007891e8cca26b8dc317feaabcb863e17be8d2c12e9188507d379b65a1f1dcbc70fc9c9fc92d30456697f50908fa659e6ad923a3dc5f830dd5d829931faa429dbbbbf900639f47c3eb5f19fa87086ade8f6beb4f15da60b3e966f1b4d5b6c1d062c3a9dcf42c3ba4499ba7ed8ace1175d334d194098279584666cba8b50f3c0db9f5506b844dee7f291ed8cda6b1fdbca1a3b83fd227a18fcf8804563cb0cea16942a742847373143421f35e4110a0d6db07b3c78927ee8306e98cf96a89afa88ccd0be5022ff313d77295f549739959e910f15a06ea4b31725a4660ce79a1967aebf6ae6ce591cc083cd75fdf15bf52d6114c5df147bf7d1d7dad130d42a2e78894afae4b53bfd5df2bc02ea3c6494acb831e45dfe04bd2bd1c95b3bdb3ea559191a94fea04ed3fab0c1ab04ef78301131b0239aa7bd9f3b356172ab02024d350aaf956df9e452f31737eb1699da0eecded1fd50a77665fdc7b630e8670509a4d9fd3dfd7350c2681ae23236755989cf1e8e76575be9f3cd6adf934dbae3f20b191c5b67ca8011ba9f64d46e92fcf82435b21ff6a4d99c63a5a89ebedc40caeecdc178591ef29eb3fc3e8258258492dbb06d16b77a7212c01026602d84fb5fc5cc805b8748a9c450c908b94cf510647ba72ab7688b2ac4ee0518e8f1ce416d8ef90dccadecaecd6da31509c2dc64d3eee13d9f24d33238f192d44bd11b86f0d40e25bb4f4a3d396618f5db2fe35cd6c0f4a3145bbca4442ac57b4c8dd390dd9982ec539249f83fe83d73dc6fe78edb47d5d7f449778ad4174c59c94450bb466cb09018978d8267a9333db28cf74d479883f9e85c38eb61aab3bedf0b6a902b1675fc5dc8776052967db262fc6fa51dc731050f2616f95895e2d03d515341219999e88a082b5f405c4dbb6f23f314ca9f9e5359215ffa5d6f3c3996ce12bbd8b4e4c5b859eb2018525544500e458a28c1ac82b2d50029313423178bddc4428bbe164e3c597a34b7ab7b8efe0c0e9b589312e5c0f3aedd2d2bbd8394093fb6ec03d0ade2fc47731c56dc92f25311a90c88ca7d0bef2704aac6ede978d4cfc77a67195666e65c04757b11c7b95cdc28f4a1504a9e4ece326ea8ffe78c84c9dee5a391b3f4375aeee2bb5425d0e3c6682f6ea9978cc236fd10648da380c40901f5890640bec3a3944b57e4c156bba045e8a781766f2c1384543e83056d87b625c5d0e27edd9e9736485466b6a91c70ff3de4475a595bcc348b245fd8ee3d3b14fe36e2c604b075e9f409578dd52dca8453524abd8232c5ca9b75bec0667226404ad44f33c15305b1ed74a628502fa921a8b685e11660cf501ee008862cb8144e2e02bfe9802626c2924b17564d01374e12aa4d8ca597436e02228a0edcb9ef01a671af6e4d8a73bf98cd8f91f1260538db21b6f0a487d6e4d6c1fe7a50cf93db98da4943d629e2c6b8a7046f419e5961a32bd4300de1596ec586a171f53d573beec022abd1e6f7938337b0b83482952d5a8ccd491c80611fdce7d43c179f2534f7297b75447970036bb37a96665c28ddefd6c7a66491f6dc86de2c2f937242901af7cd3dc6b9694deb6d345f3451e38de6b974f7d99a43dc610ed0b3437cad4d98bfd09aeca3540b1cc8973c47d5cb165bd40ed7107b3b4901406221d225e811f103e362540fb52d74cfb2704d5dbf6dd9cdce3890fa3f675ba1338634bac0d4381eb2e3aa8dc022e79b926a829b5e31166008cf1096207e58741c54a8a14259e7ac92d894d0f783cb4fddf9"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "f15f33713ad458a9c25d83a0a08f6e113003e21192bad6dea62ac81a8f94478b5fd4e27c0a628d2fffd887d4ea71f3ff800d4bd8b1beb4286d0871480eca69f7342818e4a9291d6c5b75a6e2b90fdeb24a537da7488b5e7d059ea2dbed6fb1ec4bcf24d378668287ce04169e2193a1f9b04bd4b2f354d1558ad0b4a72304640160b7df5b0910ccf19ad65ff05b2ae5fd65143ccd92158a65ede544915cc6a5a7e36b08fa30fa352651cdd6af5f9b4d7910697316ccd9ac6255a5d7c499e0cb9308b2570395c1"}]}, 0xec4}}, 0x0) 21:43:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce2010000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='sbsector=0']) [ 1185.649490][T19677] loop5: detected capacity change from 0 to 4 [ 1185.657083][T19677] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1185.670771][T19677] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:31 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) 21:43:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xd, 0x0, &(0x7f0000000040)) [ 1185.728790][T19677] loop5: detected capacity change from 0 to 4 [ 1185.750965][T19677] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1185.763577][T19677] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) timerfd_gettime(r0, 0x0) 21:43:31 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x0) [ 1185.814185][T19695] ISOFS: Unable to identify CD-ROM format. 21:43:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') [ 1185.905783][T19695] ISOFS: Unable to identify CD-ROM format. 21:43:31 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x300, 0x0, 0x0) 21:43:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0011000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1186.174884][T19725] loop5: detected capacity change from 0 to 4 [ 1186.186994][T19725] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1186.199127][T19725] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1186.347334][T19725] loop5: detected capacity change from 0 to 4 [ 1186.354220][T19725] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1186.366538][T19725] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:31 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000280)={&(0x7f00000008c0), 0xffd7, &(0x7f0000000940)={&(0x7f0000000900)={0x38}, 0x38}}, 0x0) 21:43:31 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 21:43:31 executing program 3: syz_genetlink_get_family_id$nl802154(0xfffffffffffffffd, 0xffffffffffffffff) 21:43:31 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x351000, 0x0) 21:43:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0012000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x108040, &(0x7f00000005c0)) 21:43:31 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 21:43:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, 0xb00000000000000}}]}) 21:43:32 executing program 2: pselect6(0x40, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)={0x9}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x200]}, 0x8}) 21:43:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x0, &(0x7f0000000080), 0x4) [ 1186.665009][T19746] loop5: detected capacity change from 0 to 4 [ 1186.682941][T19746] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1186.695035][T19746] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1186.786719][T19746] loop5: detected capacity change from 0 to 4 [ 1186.795644][T19746] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1186.807688][T19746] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:32 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x7000000}], 0x300, 0x0, 0x0) 21:43:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x30, 0x0, 0x0) 21:43:32 executing program 3: pipe2(&(0x7f0000000000), 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 21:43:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000900)="cd7d51297d974f1462b6d37b15d7b31f9e907f8f5faa6e7bb42ce5b66fbe21e07d212a7c8afbdd34fd1cbf42ef75ca7b70eaa4c50ceeb6dc2b83a48abd387716843e06e76ee6a2d0a4821a96df7e9f446b4114444bc70d52f82f4945973ac82a5b515e18a7ae7b3d25da086ad257f987b32f8cf66cd1515cc5a2325b186cd6a275fa3648f332e374433ca802367873e2a3834319a3c931f9078d37ef2fe61629eb801d23b41930463a7a55fed99532f82bbb57e0462fee1f0400cf1cdd2dc72d943168bc4afa624eaa73e76bbedd45bf4f7d84e947f10aa5cf43ce6860812163223ed4d88d3c4a2e27ab8ea3abb77ef04e48e648aa282c0fd31cbb24c748ca1452d3d20879ee0fcaab2adfa9d6e3b2d8e35078d47bde642406c3ada281040bb50199f35b46151dd02562fead0c2ab8c51fb44cc499c69fdffab9696c2ceb116805643c04c69a9ee068dd3cebb05e6d545a8d690cc0e597eb7e76a597675fd37009e33e2ce4478f97e61d0700ed8aa494caa570b050cad3d5ba00f910a1c887d39f23edf6d10fbac796d66a9482aa7d8aeb367f5e67fc93f519df3ce748220c3321e9be6f57676223b8951c22d51ea20011fbb13d6077e3fa743c14164a97a5ed0cc05910b2a585ca310998256815bd067300a2c4e400614ec76e69fd238507bd980082e9f0cd34685eae54cf53cc852fee3c16c0bebef0e6530f1700aaa7d95528f4b357e20cb3dc5d1d14e5b65f312220c56d1c3e3a8c4c844bb673f4ab5a34ae30a6271d2895efbf7cf737eaf2dfb59f6152b71d0a12383dca5416e087b2a9ca0d1e8a1cdc1977afaee82984c9ec2ea5ac171880981518c826a3b642c48d3bd1acb6e6a410f9faa152f1bb6e1a7f720188729ed753c343c4cbd377bf0e6a21b6f522faab2dfed0f17a43e8866b43f7be43e8fae488ece64a3a6128ccf9c102c9f11eed4409cc387733751b66e7667775352d093765ba5b5302dab45c9d48fd516f1459ebdcb408d57ca6e76e441f591d98b7c5e203024a6d6464b1923eb83200a94996f6c774a58a6f70a0769667ab41db1a26b322c73bf6969d83b66af671af0c60cbdaef042a61a90df095dda004107fd4f986d12bb7dc2c3af2127e8dc6548981b717a08836c06bb775513a6aa9b23319ee1928ce64338ee557b80b5601f4743ae0f3673939e3cc6e00ce5e7700f1b156c9b349eced946bd2af714edd3e0178b590069063c043a7cf799af49d708b498031c50834ffbd4ff473c07ad0800cf4e4b8b3f524e8a6c378dfa277d38ad603b9bbc14b0df8895ae66fd397d4495cfa48af94836854c3872512863a4d1b8f33feded3dbf44baf1ccbdd7b3958705ab3621250c6fca0795a02c83e003213a2c21f6423bfb16f09ce8d47aff518be7c0a8f89d59dcb9821d8f9e75b0fc9a3698008b0938abc8d84c657b8c282ca88", 0x400}, {&(0x7f0000000100)}], 0x4, &(0x7f00000005c0)={[{@map_acorn}, {@check_strict}, {@session}]}) 21:43:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x0, 0x0, 0x0) 21:43:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0014000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:32 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000640)={&(0x7f0000000680), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x10}, 0x10}}, 0x0) 21:43:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}], 0x1, 0x0) 21:43:32 executing program 4: syz_open_dev$vcsa(&(0x7f0000000940), 0x0, 0x24401) [ 1187.078815][T19783] loop5: detected capacity change from 0 to 4 [ 1187.090270][T19783] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1187.102515][T19783] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:32 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/user\x00') [ 1187.161254][T19783] loop5: detected capacity change from 0 to 4 [ 1187.179871][T19783] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:32 executing program 1: semtimedop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x1000}], 0x1, 0x0) 21:43:32 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, 0x15, 0x1}, 0x14}}, 0x0) [ 1187.196118][T19783] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:33 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x10000000}], 0x300, 0x0, 0x0) 21:43:33 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000130001002cbd7000f6dbdf250a03bc1f4e224e24ff7fff0000000000020e00008300000054fbffff01800000fc00000006000000d8f79e94", @ANYRES32, @ANYBLOB="008000005a070000ffffff7f08000000a00001009f"], 0xec}}, 0x0) 21:43:33 executing program 3: clock_gettime(0x3, &(0x7f00000001c0)) 21:43:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0019000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:33 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 21:43:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) [ 1188.018464][T19828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19828 comm=syz-executor.4 [ 1188.054950][T19832] loop5: detected capacity change from 0 to 4 21:43:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000080), 0x4) 21:43:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce001c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1188.062528][T19832] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1188.074573][T19832] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:33 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 21:43:33 executing program 3: socketpair(0x0, 0x6e3c48a637011acc, 0x0, 0x0) 21:43:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) 21:43:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) request_key(0x0, 0x0, 0x0, 0x0) [ 1188.175734][T19846] loop5: detected capacity change from 0 to 4 [ 1188.207026][T19846] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1188.219448][T19846] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1188.229016][ T25] audit: type=1326 audit(1620942213.523:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19854 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 1188.277202][ T25] audit: type=1326 audit(1620942213.563:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19853 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 1188.337812][T19846] loop5: detected capacity change from 0 to 4 [ 1188.350712][T19846] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1188.362813][T19846] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:34 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x40000000}], 0x300, 0x0, 0x0) 21:43:34 executing program 2: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 21:43:34 executing program 1: pselect6(0x40, &(0x7f0000000040)={0x7}, &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 21:43:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 21:43:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0020000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7}, {0x2, 0x0, 0x41}, {0x6, 0x0, 0x0, 0x7}, {0x6, 0x2}]}) 21:43:34 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001980)={0xec4, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e20}}, [@INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "8b47e397dc70562fe8909fed050deaa25388715e91b9157800047a0b1df90b23b1f0ba3e296e033e2237df30bf0a1c4ebb230984bc9db178a0dd889d2fe7f169b919a147a6b0b8bf489a9d861f9ff8083417deed42ae7ab1412020c9c993a1abf8ad36c117c372df4571a9daa363cd587e28b305164ff5e947a0c71fbf86b4e2695402b2419016edc9e90606329c38189d160cdff6cce873d2a14046c4726ec048e1f2"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "a63e9e9fb3ff2702bc255663cf94c998391f74608458a49e0fb7ad7b69a198bbae610a25a9a985902ea6c57f4c374ff2981a73cb8537108aa5b40061782112cab53ed581f530a5a9358d3b61b7a46f7175582be4792841d5bea5371de93edc119a53dd6f5a635040e5bf53e5f1d5f8e4ec3576f476a1a6e8cf64c3af30495de5c8cda18dec15830fabb0d8e604b4450f41e2c41e4c93afbeba253ff9dafcfda1e32140d151b12c083a8924d2f68e527debab24406dd9ae185aac7e7c2a6af0e23254a4b23e6a7f5fed081386f09981dbb7c97da3ea45603a33"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "492d1b8ad0a3534b6e5911fb15d11a5027f59b0b622d88b60257bfd05b2a1a4e3af36bac4126c685716ffa2669267a699a78ed24c20adea813a1c39f8837059fa084868b52d158fdb57341a495373d6a3cb036860903196a418ca7c43901906dc6b25f66e2fb8e68bcc1647b353c5e5c84c64889a5a2436b3ec81a895c19bb2a262a82dcb0e60d9d6ce161e6c760"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "890945c86554cdfc690298a0a8994437fb4b3ce8a28d00e10473da2eb0513391758f49302569deaa6a9930123cfe3f6bdcf34484374497b650489f3a94a6ce26d6e8f43d74ebd26594282676e21dd9b1312b102c3789b93e3791a26af55c3e719ebe611c701a2b3181892ebcb9bae88987bf38008344b87a8851d8da6bd1cb4a71c20d0c650fa1b7abcd9062ebc57bbaaa5b36bccee044027fd6db5c6f5bbd3440e2d2be32a83011eadb06c0db445290878f635dd0c7a7d9ef7e214d3f67a3461206b3c252b7268235ac25065342b66923411cb7814d6c9e902175630f07f823d851bbd749af54e126acf3"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "a4c94628641e7d58f1e25364459fe360098bacad238fdd5068f9b5796c609395328ed6f60b1a4d48a1528a38c30d10bd325bc78d578d625a2685a5e3ee"}, @INET_DIAG_REQ_BYTECODE={0xb25, 0x1, "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"}]}, 0xec4}}, 0x90) [ 1188.969491][T19880] loop5: detected capacity change from 0 to 4 [ 1188.980409][T19880] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1188.992517][T19880] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:34 executing program 3: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:43:34 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [ 1189.041253][ T25] audit: type=1326 audit(1620942214.343:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19854 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 1189.048734][T19880] loop5: detected capacity change from 0 to 4 21:43:34 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 21:43:34 executing program 1: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='/dev/full\x00', 0xfffffffffffffffe) [ 1189.087847][T19880] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1189.099908][T19880] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce1020000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1189.193040][ T25] audit: type=1326 audit(1620942214.473:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19896 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 1189.219346][T19913] loop5: detected capacity change from 0 to 4 [ 1189.229976][T19913] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1189.242516][T19913] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:34 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xc4653600}], 0x300, 0x0, 0x0) 21:43:34 executing program 3: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x200, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x12) 21:43:34 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 21:43:34 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, 0x0) 21:43:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0022000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:34 executing program 2: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)='\x00') 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x80) 21:43:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8f9}]}) 21:43:34 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 21:43:34 executing program 3: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) 21:43:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x101}, 0x14}}, 0x0) [ 1189.361521][T19933] loop5: detected capacity change from 0 to 4 [ 1189.372403][T19933] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1189.384490][T19933] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7}, {0x2}, {0x6}, {0x6, 0x0, 0x0, 0x2}]}) [ 1189.472725][T19949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19949 comm=syz-executor.4 [ 1189.535081][T19933] loop5: detected capacity change from 0 to 4 [ 1189.542236][ T25] audit: type=1326 audit(1620942214.843:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19953 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 1189.566936][T19933] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1189.579112][T19933] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:35 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xe0ffffff}], 0x300, 0x0, 0x0) 21:43:35 executing program 3: syz_open_procfs(0x0, &(0x7f0000000600)='net/snmp\x00') 21:43:35 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='children\x00') 21:43:35 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$ptp(r0, 0x0, 0xffffffffffffffe6) 21:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0025000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:43:35 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 21:43:35 executing program 1: openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) 21:43:35 executing program 3: mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) [ 1189.726525][T19977] loop5: detected capacity change from 0 to 4 [ 1189.742870][T19977] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1189.755042][T19977] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:35 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 21:43:35 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x1, 0x0) 21:43:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r0, 0x0) [ 1189.875075][T19977] loop5: detected capacity change from 0 to 4 [ 1189.884690][T19977] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1189.896749][T19977] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:35 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfc000000}], 0x300, 0x0, 0x0) 21:43:35 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6f1e9312df1aac05baa3a5ac738fe0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0) 21:43:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b69f7bdb3c392e9c"}) 21:43:35 executing program 2: unshare(0x16058100) 21:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0027000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:35 executing program 3: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) 21:43:35 executing program 4: openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)) pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000400)={0x8}, 0x0, 0x0) 21:43:35 executing program 3: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6c1e9312df1aac05baa3a5ac738ee0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0xffffff22, 0xfffffffffffffffc) 21:43:35 executing program 1: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0x0, 0x0) 21:43:35 executing program 2: openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) [ 1190.074102][T20021] loop5: detected capacity change from 0 to 4 [ 1190.097646][T20021] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1190.109740][T20021] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffc77) 21:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce002e000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1190.229023][T20044] loop5: detected capacity change from 0 to 4 [ 1190.251854][T20044] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1190.264040][T20044] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:35 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfe80ffff}], 0x300, 0x0, 0x0) 21:43:35 executing program 1: socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/if_inet6\x00') pselect6(0x40, &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 21:43:35 executing program 3: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000180)) 21:43:35 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) 21:43:35 executing program 2: r0 = socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) [ 1190.344970][T20044] loop5: detected capacity change from 0 to 4 [ 1190.356521][T20044] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1190.368635][T20044] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce003f000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "85c2964b4a"}, 0x10) 21:43:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, @hci, @nfc, 0xff}) 21:43:35 executing program 3: futex(&(0x7f0000000040), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 21:43:35 executing program 2: socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/if_inet6\x00') pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 21:43:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 21:43:35 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6f1e9312df1aac05baa3a5ac738fe0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='blacklist\x00', 0x0) [ 1190.509646][T20071] loop5: detected capacity change from 0 to 4 [ 1190.524540][T20071] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1190.536607][T20071] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:36 executing program 2: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) 21:43:36 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfec0ffff}], 0x300, 0x0, 0x0) 21:43:36 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x5a9}}) 21:43:36 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x200, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 21:43:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000b72df9"], 0x20}}, 0x0) 21:43:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0040000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r0, &(0x7f0000003e00)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)="7f50b1ce784987a7a3f5de0d3598c7283d002ab0314a00f5ced033008fe9860381b216faf2df9313dbdd39944663dbf9c8dc7956abc82fc21acf6f318599990350e83586bfb218a9e6dddb7aefb0c4b2944441793bd471903ec9d54a5d7b8e3e5a260c8416cff73d2122a322227be2a0345827d3f107335f41fdab119308d04833bd2c2d372835170557820a7d7b044df0a449c7692615b76ec72ed916aaed93a55c3c4f9732b4e9c4f99ba7ee7da033d3c5e7dac2781679a05c9272e9e48d", 0xbf}, {&(0x7f0000000540)="d7a3151d1b1a4b123db89f0ab6537d551c0f74eaf8e966b3ccf6662f71003c53bb999abb73bc82e045a58c2e79c432455984040bbfe1d6b3384a950d31de7d6601ac0378b2e02d6d791bee2753f993cb11f82905a8", 0x55}, {&(0x7f0000000640)="7172014c4d892a6a744ecc899587df3ad3af31c7a4513fd1fb942c51483c98ef6ff3f25347e901b66dec66cdcba78a1fbee19fd541408b9b85fdb75a9e7fc5278a18602028a9832ed299be8653fcbc65230c3bc641951e7fe0e91275bd2386893cfa5101fb5dcd297bc07b02", 0x6c}, {&(0x7f00000006c0)="099c3cfb4fea973df9c32fb97caf6f11af467d951f43f007f33872a37dae616ecb275b389649619e54aaa4da2bd8f18e1244bf297e41fb67bba5f31966d4ede7011ade4181fee8095c00630c0c13f9347220280ec5e11ef7492f6dd0abdb19bd1238154ca78d1453457537456a143a2d0b7111a668e298dc1e4a224e663326bdc6635346a8420ad545fc8047a71e7fd9bf33f8b707b487137ca0d257b0997cc250d1c1bc78b705f61a7eaab34877e315af133afc527b0d6a8d726c", 0xbb}], 0x4, &(0x7f0000000200)=[@txtime], 0x10}}, {{&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000840)="913c69fd473e014174a435c0b1274966aaaede04e3be7b22cdef66b2f6c1c9c347357ad3c9a5899900c01e825e2dfbc43a47802688abc4dba52b3b21d595533b80737f83e1d226964ded29352d5ad1d834486c7346140eec2a441685d6c6d5a387aad8c073d169f9133235673a0b1f75548f8e96fb4dc515eb9213ade712ca31a5358a378c41241951b67c9da41213d1c240119993e6634ae0ebec4ec0393a337190950c69f954d934c9b25f8f469cb55dc4f80c9a65dfd48350384d37d36f3e60", 0xc1}, {&(0x7f00000019c0)="9d62c16a921778d2026e5b32dc308b14bc4f", 0x12}, {&(0x7f0000003e80)="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", 0x1000}], 0x3, &(0x7f0000000240)=[@txtime, @mark], 0x24}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002a80)="d785e375b11a9a54eb95b9caad60cb68c1cef42b12d3f66f5f2b592942f434d1ae", 0x21}, {&(0x7f0000002ac0)="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", 0xfd}, {&(0x7f0000002bc0)="8eae607055ab99aa0ca0db3df5816cd10ef7fef198574aa1d82a89b11815bd9864c355c03fdc4ad989f8672e8b0dd1bc28361e0ea706d7d13d117a9c35f3243512f6c95166f9ee1a38165eab039f4b53f662837eb054327b2cd40a8af6e48df3321ea15e8c18dded8915807d72039a4c4e0ac70dc39a8ac31c1c2543061fa37af1cc0bdb0bac290d29e2cc3ed30b6ac8d4672f9da50719702a76dce418cb15d822c2082592a0fdcbc218b77d5dfbbf66253d3f913b194cb0ec981ce83d2dea3834651d142d1ca6207d469d9f2d5f2b0a363f890e29d44827ca0391d6a122d2278bfe87ccb246a46791641f067bbb9064a5e5e5bbe655ed8a876f37e9054053cf64277a3109dd304ca8e41ce3e01fbe139246c229e401def4763420b8302230c0c7f3920e7efb66d814fee21e4d5fce52eeffdb2e1a042bf7b22c1a3eb46e8382d6c28a09a361d0843109793c6a2a1e37090865297dbf23300f6de80db3559c59c1186bdc56bdc8d8e3c06efed679028f53f56829e524c2974a5b5eb9276a83654939df6610b1ddd9da548f15a2c9385bab9caeabbca4d4fa7105e53bc607a97486dc3ebbfce880eb5fe0b32ffa95e04d15a5f54f66a81f127c81cb464981f3e3e128e77b79ce5100f65f777b327221ad2b42406885be5e6b8628293ec68187311dea483f3fd014852a3b7537f26eccef6f11148707033aa28a86207f33a8d05e91f9e34bb42e73e875e7d1c650dc95a1b3f52131ac1a41ec7c63ace9a5edc0e989dd0e514e29305b1527f0cab18e97005220202120dc31013669fa57d682846239f1487b55ac7ed71fecc3bc1ba27ddab5f5276e159c5e52450eec604540edade66979bbd4176a2fd0eaabdd8e1f27ab51bf090333a15ea0026c71871494126752a9b5a80630fe4b90b18ae9c7f926ab9b6847876ce7821aeb55f0c509c6ff4a5174ee15a4aabf0d11d0b1e9da115aa0d7095bef0f2e64adbf696baa148888136cb60482684495a927fdff3e4ae4ce41eea836aa1504926e1d1ba37e9bd6ec1279371e4b15aecb884d5266fc49304a5c984d87ee4759413ffb07208d030846efb17837a72705cefcbb42047e7af30ef69bd08b1e6500df608191cf0ef43a15c906d00a4e4e523abf331902d949d0f7f62812ec37269750fa5ea7fd91ec83b522ffd9ecd367c544c3665570751366e62a481fad2ed04337054656d5c8fd6e71e2022f27314b46e9063662f1cc7f04537ff3a8935dbdb30be064f0a3dc00bee0ee9ee3ce87ff9a7a729fe58bbee7e3e600662dd7d0ac3127b178aaf03f584b7cfd6e2572eae83d6cb32465925bef27fe0853b79d6bd4c7dbcf7af9dd643e776b1bb843e5b1acd707476d2e6841231717dc08d4dfe9a62adcdf0485b727a8cd49187bcd0e465cf2de6dc2ad314548d33197ae27e2daf0e9a83d8e338e2d04f2a5d038d60983d7c845a020af371a22e3555b95a7c89e4f47174b7d87884d006ed7ef1f834c04edb601d5bff90d028015e7400c46398f0cadbdc1e75d57c85bd00215e071522c083b1c7a36d4dff000b97325341361f3d6a167ce4986d5a31de4c577232b6a625d442caced171d26a4920f25d82461d34b8d326669e34c97b93feddd5d01fae186ed0e210854bb546a97bf330ebf04ee64309bb0dc993d61406b4620f2afa92d7d2b08479d3b660be1d62631f395938787468fb2c210c6d79bddd4e472cc7372823ff6abba26d76c846522bcdbc24719530a780ab4dfb57dd5357f6986be7ce519a5766c918f6f7e20cf78e581c2557b2ede0dc9c2b2723a0b471e820c9d3c8685aff6b90e3f1c683e5e937cda93c618b23c75050a8b594ca2abf7c212992930e3e5f03f487cc5d332cfafc598552e61097f251ff06377a8d86d2761782a924e3ed8360b134e59a0f9a52c9a63685f9a86497b17825661e2f846a9249d6cba89f9a59d22104e054f972cda6148ae4ad0633ca5ad3ebc251160b95b16f5e372b026864d657f6cbc9568b13616f049382078d6e76cc806e5a8d820babe0cfb926cb4a8f402064c0e50c827968e3fa0de7a70b4314e9e7303647953b829611ac7dfcd714cc515b4dd46dcee5dc88d052a30258e1f5a9c5d02d82a6454c19fa94a47b3cd7d17f0409e9c61bc36e6975d8e29174156ef1681cfc7c99ccde70bf3ad3db89b92312e550e62620a507139aa08114e607f71b3eba45be0a97a4cc0bf4572f0b983e23373cd7d64b988ff97f182d05bbfc5f5c4ffa46ea07ce72a93a79b8a54e7ece7cc22a8c07c0905d6895a048238e716c43fa17b5e939e7565716ceb3762cbe99bc7b97184c64ea23ecc660a09d010f01ba9999c05be6e1bf9e494b33887641265a74bbfa62648fa675d2f737f5de34735c2d73417656bc617874375405c94511d40a7f6e5614b46efd16eee690d1b773d88dbef2c358d9eb9baaa023cbe9c611e66bb99a8f68978914dc3ee136d00d8b6a8614c9785cacbbac987e7b11d33af27ae58b26c70e9976280a498af784e7e59b12da1de08a7dd2995408b0b541f89f42a7d8cb09ef0cec07c9e7a3583474d5442f52da93f37efc33eac1d8b51440c39978b5729c10365560e08d8987d69c438c2e9f1a3b3e3230ebd13d79c76d22b5684347ec43d196169ede822ca6961b0af9a3f5cb4079a8c1273c6e189322ea124045c0ababd271b50f837859e73d7d1f42721061330bd10b4d7f696eeeec04f39986f6dced46d34b44e13f6bcb7ac8303c81ff497144ea97292f07eb15893ef5b831c782dbd9205297fe7ddfc89d7acd474a289ee2c0a70e35b8cf7e80eab3e888c8e2b87580fefe768057a6578644aa0db8ccdfa6251a06e74c0731499ba65582265f6b448bce0bb0401a85f8805a0772d94008b8d2aa8a45e12104c576c5085a5c07e6a059e361cca74bafbc0866e27682de1060456192fdb447e48a7d00d62091f3b09989dff7cc868dd4219709fa8969964828d16c40500584f8c66fa81b4786085525feac9bb6c4b3deedeccc142d753fc48610b006c5c9a26da65fb93df05a8a1bfbe580cc6bc7cd82feab2a0550fa8b8eb633773db0f3eaa7558f7ba0567f49e6acdb8bca7a65ac6f2aeb3b514383cdd0d4bbc98c75bea9d4ba4a493502570df70a1192532cd9672b6996e572efcff7b0ccc32f777966b1e3fc77373748ee527503dcf493d496695c8f8fec7e8222993e9f57409d47c1c3d01ca8bc9f2ec9a32f4435cb9fd9ee73fd1f8e1ef282f577d5c1f0fd368fe7a4204f4d922e11f247a62d7d31979134d7b1e68cfaad96195ecb3f7a457f1c7ccb0799822a4d5e302d6d78f7de866f3ca57ec487f87b6c355b6c1d36457c804af19fa76c8984e004906d46c257944a99807c7dae45332e21a3f8ef93c135ffbf757920e67c1ecc064049a3830cc7d0bd7d0aa22b350d5d43252e1f6ad1b4a73d9072974f6eb38e167d179eec98e81e3e8d627df1c2f7cee5897514df1c779bb7df73cc5da0a3a48b7011b27ac2585b07db506ad54542e8f8224e70b2e2c99f9ae20a5e53a925c8b07ba3833e783f0af1b09911799689a9594f8570d4e842033e054848948385f578ff76857292858e773d9f5ae4e8e9111e0324742edcf4bed1c999764e73d7345a8853aee2539524fdc76ccdba0ae9783a913a76c47b775050b358acaa75836688c1c45c3e78cc0f6423229dde2c28061b0fd382930eb5c2666def1a6aed7aa1bb90aff7db31f5bcaac0fa1ff1640c6e301d493ff15cad757b9e55f332b69f9f26084452c3059ddd3b6f218187c8f291aa26b09f15160a7c18a20777b2f1559f50f3bea7ef62ae4b3501c219a149f82d145ea5f90b3ce8eda32753c2160d0a8dd74abf73b17ac33c5f86bd509871ce28e44ff622628198220d6581b02403459d63041e23f18f4e815d1de0b578590a20443f21d70a7c2922f59906188d29fcf8f33ffc610c9f62a7af9d302383e5c709c349d4324eff1834385be7d9a419eb301f051d361671f9ce260d23205bc163973c1b4516de69dcfbd6e1c3e3f4f143c7caaf95077b68501db9bd32d89918f7a5ffb7612b9cdbb08dc3344fdb4a7d4ae1a94a44094e32d89446638d6d296d7070199162a0e511c1ed50db0037b22f760ea5d63ab66198edd24d3d84e2fdd05ca8edf147cea842121aa83308a3abd52722cf07afa86d9b85371197668f702e5d9afabd00f4ed6bf2e93cd4a93ea3362a0cbd819578509f87827e1fa4f217592b2c31c02a5344f76a82a1d8a793dcb73dd4692df3792f2a52559f1807ace5216098b291138905b6368c21dfa520143bd7109d5bce1e7fe28a67b05816f7db84e8e2827854cb7d743b1a8713699dc4279a5289d4fc4ef4a75a101f88b6bd2ee6f2d3526d85c028d01194b0306b76c9819a1412df9e839f0d74ceac7ff33d7a7e9aad17502069efbd6b8e230205c76c1f1e60a5763ce3ce225a37bb629f24b4338e68f4ddbe62d642e1ba6ddfe9dbe0f0a1daf87d3044f47a46bfb4cd98ca429b97b09fe05d0f31e8e94e8595ea2f587146d57ab25d86376441763ddad0e6dfd3db3222928a32b7236deba500a1d17ceac0193b9ab4ec36e3289daa36f4aaa2af945a1a06b196c4fe050320d412d7b8b6e851348612fd58d2d495f1d35a3f6ccf58e7fb19cd089f39a67af7968fbaae4ac0c18c713902eba3f16b8df3e9466a0c58fb6f4354d95b68c03d9f042a2d04e612c02d31ec163640b09aa14474020f92407ea270076ec09cc957859148eac0647465d77091875f67616ea290e5e3dfd3a1de4344b698ffc8306a67b288805767779ddd03b12d0942651b2b533589bd3328d1ba79a88be2d6669283a33c334e9f63ad7e0213c4e4d01117c780f045ad5497dde64d941ebed1662d9178a19dbb9663526034e7c86781f6a30bc87e73384027469cebedea51f7e214ba7da62b542ac5847c669bd8659fb7a45f227dcb3eed5ae9aa9e3b99fdf8d08968ba7ea6ca28be4a3044bd232fb2d04240a5b700b8155fd6527c44cb3f6afd7cd8fa87060483e217ef9ac22a941460c8025e260fe8fbd5cb8e9d66266ede8d3e4037228c7c9419167d04bba568d2eb3e5d34064186201244805795310da0c3527358e850b94d66b9ac95f9368922f2686f9d4e2e1c30fd36f6faf9973d85e3834e47c10a1fa6e44f3a1163268b8a2ff0c27eba6405404a0a0631df3ea1446cfc3e94f0f9b14785a2a6a6c8ad233cf6762b4a505b2a4172c60af3d23c94f664c1483307c9c73778babd74d1231c3390129d94b61c1c56337aa280aec785c30019a5118fda8246b0ccbcd9dfac1cbc2fad7759a25a5ed293ba523ad9621b574a257438fe5ecbe0b85356eae3301434b885470174b14251d95e2a9d53ff0c090165e82ac51f820efada98aff28c2f80e12b57b9e166e9dfc614aa79dd794df20005c8a43f92eaa91511563389ad19877c376534d1c53c10fe331d3e9b70936dd60c12601bcef86e8156caa354ee13e236c535cd984520022561d369ae88603f9dfa0eff47ec78dcf289b83ffdd53b2ef17187379e3b0678a253828eeabe9f5bb7bf04fcabbf5a1810774bf248158f51ef0e30a297009c01c63822ae058949fc947c17642520bf9eb75a469c7b21a3f66507623e16d79d6905cbff641dc0eb5c9e07c526150d8383e4108e63bdb809faee3b7cdaab3d0dbb287b466555b282734ea340b38ce0f9c28001bc660fce323c6f11a6747eabb363beae90faf992117a5249fde89f3047b5b439830265bb70f2bc0d2e569e0d6fa94587c6769a548411a5a", 0x102b}, {&(0x7f0000003bc0)="53581af64428b3642430905a65f38367f6e804582cfaf91cd7795ea00e4e1d3ebabedfa5b3e77da51cb3373b016b1c970d3e45844e3d31f6e8459016f1fbfbcd39cd9122a14fca58432acc0f7a05834ff20e85e9871272e566ca3c85d31a8b9c40acf2f8f2f684e2453817a9a04f31b4e21ef7c6c90ded12355b652b452671903504e02cb62de1bd49eac3c65040955923151bcd5ae453033a8b78789a35f3338268e81b84fdd529aa95b0b4d60767f8a2a5ddd9dfa425da25efc76e71cc06dd45c84935dcf120f0288ff78e969eda10ea7226c889af59e9294c4a6fdb", 0xdd}, {&(0x7f0000003cc0)="e35d32c2e6c23621e15c5b19cffeeb3f4ab968b3066ba21d9fb8e811c511eae312054107602519622a700a3cf2cf54b5824181569b67d64a86d9a532b1a8836954b4f48a8e9ba82d1d1bc4e7f57e666953e0dc74885cbdbc96dc434d9a83186d8f2d2df32dd93d59b9e154a2cb6c9a113cd7caf26c48eca1ed234acd6c04487d7e9d9fd6ffea4a0cb6fe42fffc2768a8ef02bcd529c5df3cec7c16786ac751eea368060c3274423bf3737fd17ea2fff6e236273649edc7ca434ce4a26640351420b0e54469dee43057ed7a90910daed6e4e9f20d53acec80129f512ca426d222ee4426", 0xe3}], 0x5}}], 0x3, 0x0) 21:43:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 21:43:36 executing program 3: socket(0x2, 0x0, 0x70000000) [ 1191.339568][T20107] loop5: detected capacity change from 0 to 4 [ 1191.372018][T20107] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:36 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)) [ 1191.384093][T20107] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1191.388050][T20114] rtc_cmos 00:00: Alarms can be up to one day in the future 21:43:36 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') 21:43:36 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000300)=@nfc, 0x80, 0x0}}], 0x1, 0x0) [ 1191.431721][T20107] loop5: detected capacity change from 0 to 4 [ 1191.446739][T20107] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1191.458893][T20107] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) 21:43:36 executing program 1: clock_getres(0xcd51553df13cc6ca, 0x0) 21:43:36 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xff000000}], 0x300, 0x0, 0x0) 21:43:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0045000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 21:43:36 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c110000140001"], 0x113c}}, 0x0) 21:43:36 executing program 2: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000000c0), 0x0, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 21:43:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 21:43:36 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 21:43:36 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 21:43:37 executing program 1: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) [ 1191.625290][T20151] loop5: detected capacity change from 0 to 4 [ 1191.652260][T20151] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1191.664324][T20151] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/if_inet6\x00') mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 21:43:37 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6f1e9312df1aac05baa3a5ac738fe0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6f1e9312df1aac05baa3a5ac738fe0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000580)='ceph\x00', &(0x7f0000000500)={'syz', 0x2}, r1) 21:43:37 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local, 'veth1_to_batadv\x00'}}, 0x80, 0x0}, 0x0) [ 1191.806690][T20151] loop5: detected capacity change from 0 to 4 [ 1191.825978][T20151] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1191.838082][T20151] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:37 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xffff0000}], 0x300, 0x0, 0x0) 21:43:37 executing program 3: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6c1e9312df1aac05baa3a5ac738ee0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffff9) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:43:37 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 21:43:37 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 21:43:37 executing program 1: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 21:43:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0048000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:37 executing program 4: futex(&(0x7f0000000080), 0x86, 0x0, &(0x7f00000000c0), 0x0, 0x0) 21:43:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce004c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1192.530911][T20201] loop5: detected capacity change from 0 to 4 [ 1192.548462][T20201] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1192.561465][T20201] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:43:37 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x200) 21:43:37 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140), 0x0) 21:43:37 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1192.712880][T20225] loop5: detected capacity change from 0 to 4 [ 1192.723319][T20225] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1192.735442][T20225] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:38 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xffff80fe}], 0x300, 0x0, 0x0) 21:43:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000300)=@nfc={0x27, 0x3}, 0x80, 0x0}}], 0x1, 0x0) 21:43:38 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, 0x15, 0x915, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 21:43:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000140)) 21:43:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x23c}, 0x0) 21:43:38 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001f80)=' ', 0x1, 0xfffffffffffffffc) 21:43:38 executing program 3: r0 = socket(0x1, 0x80001, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1192.847010][T20225] loop5: detected capacity change from 0 to 4 [ 1192.876810][T20225] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1192.889523][T20225] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:38 executing program 1: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 21:43:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80) 21:43:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x0, @loopback}, {0x306, @broadcast}, 0x0, {0x2, 0x0, @multicast1}, 'veth0_to_hsr\x00'}) 21:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0060000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/if_inet6\x00') mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 21:43:38 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xffffc0fe}], 0x300, 0x0, 0x0) 21:43:38 executing program 3: openat$full(0xffffff9c, &(0x7f0000000180), 0x451081, 0x0) 21:43:38 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003080000000000000000000000000000050003202f"], 0x1c}}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000080)="01000000000000001801") 21:43:38 executing program 2: timer_create(0x2, &(0x7f0000001040)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000001080)) 21:43:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="67d7189801"], 0xca) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, &(0x7f0000001500), 0x7, &(0x7f0000001540)=""/92, 0x65}}, {{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f0000000140), 0x2c, &(0x7f0000001b00)=""/128, 0x80}}], 0x3, 0x0, 0x0) write$nbd(r1, &(0x7f0000000000), 0x10) 21:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0068000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1193.089518][T20272] loop5: detected capacity change from 0 to 4 [ 1193.100887][T20272] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.113127][T20272] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2}]}) 21:43:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xd, 0x0, &(0x7f0000000140)) 21:43:38 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x113c}}, 0x0) [ 1193.193803][T20288] loop5: detected capacity change from 0 to 4 [ 1193.210975][T20288] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.223047][T20288] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:38 executing program 4: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x200, 0x0) 21:43:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 21:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce006c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1193.353812][T20317] loop5: detected capacity change from 0 to 4 [ 1193.384269][T20317] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.398263][T20317] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:38 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xffffffe0}], 0x300, 0x0, 0x0) 21:43:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x3, 0x4) 21:43:38 executing program 2: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 21:43:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000100)) 21:43:38 executing program 3: add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 21:43:38 executing program 3: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8, 0x200, 0x0) 21:43:38 executing program 3: futex(&(0x7f0000002440)=0x1, 0x88, 0x0, 0x0, 0x0, 0x0) 21:43:38 executing program 4: pselect6(0xfdd4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 21:43:38 executing program 1: request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 21:43:38 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) [ 1193.513212][T20317] loop5: detected capacity change from 0 to 4 [ 1193.535008][T20317] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.547067][T20317] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:38 executing program 3: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x144, 0x200, 0x0) 21:43:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0074000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1193.668184][T20360] loop5: detected capacity change from 0 to 4 [ 1193.687298][T20360] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.699385][T20360] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:39 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x300, 0x0, 0x0) 21:43:39 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6f1e9312df1aac05baa3a5ac738fe0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, 0xfffffffffffffffe) 21:43:39 executing program 3: request_key(&(0x7f0000000200)='.request_key_auth\x00', 0x0, 0x0, 0x0) 21:43:39 executing program 2: move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080), &(0x7f00000000c0), 0x0) 21:43:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce007a000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 21:43:39 executing program 2: r0 = socket(0x1, 0x80001, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) [ 1193.838787][T20380] loop5: detected capacity change from 0 to 4 [ 1193.886053][T20380] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.898962][T20380] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1193.966006][T20380] loop5: detected capacity change from 0 to 4 [ 1193.973081][T20380] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1193.985509][T20380] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:39 executing program 4: add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xffffffffffffffff) 21:43:39 executing program 3: pipe(&(0x7f0000000300)) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 21:43:39 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$search(0xa, r2, &(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0) 21:43:39 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x302, 0x0, 0x0) 21:43:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0fff000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:39 executing program 1: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x5, 0x200, 0x0) 21:43:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000040)) 21:43:39 executing program 1: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r1, 0xfffffffffffffffb) 21:43:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) [ 1194.528839][T20412] loop5: detected capacity change from 0 to 4 [ 1194.540680][T20412] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1194.552871][T20412] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x12, 0x0, &(0x7f0000000000)) 21:43:40 executing program 1: r0 = socket(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000001) 21:43:40 executing program 4: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:43:40 executing program 2: syz_open_dev$rtc(&(0x7f0000000180), 0xfffffcf3, 0x40) [ 1194.660002][T20412] loop5: detected capacity change from 0 to 4 [ 1194.671921][T20412] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1194.685947][T20412] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:40 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000002180), 0x8000, 0x0) 21:43:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x4000440) 21:43:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000010000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:40 executing program 4: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x2) 21:43:40 executing program 2: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:43:40 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x307, 0x0, 0x0) 21:43:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 21:43:40 executing program 2: futex(0x0, 0x81, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) 21:43:40 executing program 1: mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000) 21:43:40 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000500)='keyring\x00', 0x0, 0x0) [ 1195.386469][T20461] loop5: detected capacity change from 0 to 4 [ 1195.402818][T20461] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1195.415067][T20461] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000011000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:40 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:43:40 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) unshare(0x4070880) socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(&(0x7f0000000100)=""/133, 0x85, 0x3) 21:43:40 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) 21:43:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x0, @empty}, {0x1, @multicast}, 0x12, {0x2, 0x0, @multicast1}, 'bridge_slave_1\x00'}) [ 1195.541496][T20486] loop5: detected capacity change from 0 to 4 21:43:40 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "185808fc569dc0f90163f5c94de6f1e9312df1aac05baa3a5ac738fe0f3293c9470f879f1db6fe3d37cd2d4332955e1c67ed3e138938e31f1fbebb7d3d685442"}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)='%+]-\x00') 21:43:40 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000040)={0x50, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e24, [], [0x4000], 0x0, [0x20, 0x1]}}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x4000400) [ 1195.584219][T20486] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1195.596384][T20486] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1195.647965][T20486] loop5: detected capacity change from 0 to 4 [ 1195.655744][T20486] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1195.667792][T20486] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:41 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x310, 0x0, 0x0) 21:43:41 executing program 4: mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x3c5c514d349b07fd, 0xffffffffffffffff, 0x0) 21:43:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000140), 0x4) 21:43:41 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f0000000000)={0x4}, 0x0, &(0x7f0000000400)={0x8}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 21:43:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0x3, 0x1, 0x400}, {0x2, 0x82, 0x41, 0x2}, {0x6, 0x3, 0xff, 0x7}, {0x6}]}) 21:43:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000012000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1195.800149][T20522] loop5: detected capacity change from 0 to 4 [ 1195.810113][T20522] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1195.822310][T20522] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:41 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r1) 21:43:41 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:43:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000b00)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, 0x0}}], 0x2, 0x0) [ 1195.832600][ T25] audit: type=1326 audit(1620942221.133:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=20516 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 21:43:41 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) [ 1195.925580][T20522] loop5: detected capacity change from 0 to 4 [ 1195.957294][T20522] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)={0x401, {{0x2, 0x0, @multicast1}}}, 0x8c) 21:43:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000) [ 1195.969964][T20522] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r1, &(0x7f0000001600)=ANY=[], 0x8d) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 21:43:41 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x3fc, 0x0, 0x0) 21:43:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) 21:43:41 executing program 4: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8) 21:43:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468fe0700000000000000ff3f040000003b0a00010000000004002b000a00030014a4ee1ee438d2fdd20300001000000000", 0x39}], 0x1) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:43:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0002000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:41 executing program 4: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) r1 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1, 0x0, 0x0) tkill(r1, 0x800000015) [ 1196.090550][T20560] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1196.106322][T20560] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1196.136341][T20560] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1196.147345][T20570] loop5: detected capacity change from 0 to 4 [ 1196.156487][T20575] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1196.174525][T20570] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:41 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0xa8, 0x7f, 0x0, 0x2, 0x6240, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x10001, 0x6, 0x5dfd855b, 0x6, 0x20, 0xffffffa4, 0x93, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x101, r0, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x122052, r2, 0x3000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) 21:43:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000480), 0x0) 21:43:41 executing program 1: syz_open_procfs$userns(0x0, &(0x7f0000000080)) 21:43:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r1, &(0x7f0000001600)=ANY=[], 0x8d) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) [ 1196.186615][T20570] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 21:43:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0003000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1196.316627][T20597] loop5: detected capacity change from 0 to 4 [ 1196.333341][T20597] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1196.345450][T20597] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1196.397951][T20597] loop5: detected capacity change from 0 to 4 [ 1196.405315][T20597] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1196.417543][T20597] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:42 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x4000, 0x0, 0x0) 21:43:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) 21:43:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x122052, r0, 0x3000) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) 21:43:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r1, &(0x7f0000001600)=ANY=[], 0x8d) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 21:43:42 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="9f7b2b1ccfd462cbd56e2843a9fbb0ea43106ec205450e11d9c05765706d1654b8cba369a58f347263a14c172f30ffde17088ad3000000000000000000000000000000006a645cf45657a83b2add54eba36811a2f0ceb0b1993fcb39162772d16c2d5b5858d35960e3885c3e68410c6ecc78c3969f92916a601a12179c567a8bbf6e4f7b64919a967b1d9cb06809c49b34126556c19e67d94bc533bf4dbf39df9abab2c2c883658d7eff0ce2c4d0e8927b847dbe4b23ce84da5c23f7262c381f0d94d769"], 0x14, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x122052, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) 21:43:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0004000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:42 executing program 4: io_submit(0x0, 0x1, &(0x7f0000001400)=[0xfffffffffffffffe]) 21:43:42 executing program 3: timer_create(0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 21:43:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r1, &(0x7f0000001600)=ANY=[], 0x8d) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) [ 1197.005675][T20622] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1197.041904][T20625] loop5: detected capacity change from 0 to 4 21:43:42 executing program 1: pipe2(0x0, 0x4000) 21:43:42 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) [ 1197.088720][T20625] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1197.100867][T20625] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:42 executing program 4: alarm(0x1800000) [ 1197.228078][T20625] loop5: detected capacity change from 0 to 4 [ 1197.234944][T20625] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1197.247186][T20625] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:43 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) 21:43:43 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) 21:43:43 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) 21:43:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 21:43:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 21:43:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0005000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:43 executing program 4: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) 21:43:43 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) [ 1197.968923][T20667] loop5: detected capacity change from 0 to 4 [ 1197.978676][T20667] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1197.990728][T20667] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:43 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfc000000}], 0x300, 0x0, 0x0) 21:43:43 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x300, 0x0, 0x0) 21:43:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0006000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:43 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x300, 0x0, 0x0) [ 1198.035306][T20667] loop5: detected capacity change from 0 to 4 [ 1198.049307][T20667] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1198.061447][T20667] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1198.145013][T20692] loop5: detected capacity change from 0 to 4 [ 1198.185957][T20692] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1198.198082][T20692] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1198.313241][T20692] loop5: detected capacity change from 0 to 4 [ 1198.321906][T20692] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1198.336155][T20692] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:44 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x4, 0x0) 21:43:44 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x300, 0x0, 0x0) 21:43:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0c00000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0007000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:44 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x300, 0x0, 0x0) 21:43:44 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfc000000}], 0x300, 0x0, 0x0) [ 1198.891261][T20718] loop5: detected capacity change from 0 to 4 [ 1198.912254][T20718] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1198.924767][T20718] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:44 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x300, 0x0, 0x0) [ 1198.990771][T20718] loop5: detected capacity change from 0 to 4 [ 1199.018140][T20718] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1199.030353][T20718] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0008000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:44 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x300, 0x0, 0x0) 21:43:44 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x7, 0x0) [ 1199.326977][T20746] loop5: detected capacity change from 0 to 4 [ 1199.347639][T20746] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1199.360090][T20746] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:44 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10, 0x0) [ 1199.500249][T20746] loop5: detected capacity change from 0 to 4 [ 1199.508816][T20746] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1199.520904][T20746] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0009000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1199.679115][T20773] loop5: detected capacity change from 0 to 4 [ 1199.697698][T20773] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1199.710031][T20773] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:45 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0xfc000000}], 0x300, 0x0, 0x0) 21:43:45 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x300, 0x0, 0x0) 21:43:45 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x300, 0x0, 0x0) [ 1199.785105][T20773] loop5: detected capacity change from 0 to 4 [ 1199.794099][T20773] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1199.806687][T20773] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000a000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:45 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x300, 0x0, 0x0) [ 1199.989911][T20796] loop5: detected capacity change from 0 to 4 [ 1200.062934][T20796] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.075165][T20796] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:45 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x300, 0x0, 0x0) 21:43:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000b000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c0fff00ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1200.236233][T20796] loop5: detected capacity change from 0 to 4 [ 1200.243631][T20796] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.255774][T20796] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1200.342013][T20815] loop5: detected capacity change from 0 to 4 [ 1200.350416][T20816] loop2: detected capacity change from 0 to 4 [ 1200.365064][T20815] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.377139][T20815] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:45 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0xffff80fe, 0x0}}], 0x300, 0x0, 0x0) [ 1200.386074][T20816] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.400650][T20816] EXT4-fs (loop2): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1200.487991][T20815] loop5: detected capacity change from 0 to 4 21:43:45 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 21:43:45 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfc, 0x0) [ 1200.526459][T20815] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.538833][T20815] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1200.652785][T20842] loop5: detected capacity change from 0 to 4 [ 1200.663153][T20842] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.675275][T20842] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000d000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1200.810484][T20842] loop5: detected capacity change from 0 to 4 [ 1200.820855][T20842] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.834823][T20842] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x28e}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:46 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x700, 0x0) [ 1200.948306][T20863] loop5: detected capacity change from 0 to 4 [ 1200.965069][T20863] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1200.977323][T20863] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1201.065848][T20863] loop5: detected capacity change from 0 to 4 [ 1201.074149][T20863] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1201.086216][T20863] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000e000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1201.270493][T20885] loop5: detected capacity change from 0 to 4 [ 1201.278810][T20885] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1201.291095][T20885] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000240)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x28e, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) 21:43:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e}) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce000f000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1201.432333][T20885] loop5: detected capacity change from 0 to 4 [ 1201.440341][T20885] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1201.453046][T20885] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:46 executing program 2: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) 21:43:46 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2000, 0x0) 21:43:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:46 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x700, 0x0) [ 1201.582288][T20911] loop5: detected capacity change from 0 to 4 [ 1201.590815][T20911] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1201.602876][T20911] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100090c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0010000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:47 executing program 2: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1201.761274][T20911] loop5: detected capacity change from 0 to 4 [ 1201.769790][T20911] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1201.781896][T20911] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) 21:43:47 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x4000, 0x0) [ 1201.908130][T20944] loop5: detected capacity change from 0 to 4 [ 1201.929495][T20944] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1201.941712][T20944] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1202.012656][T20944] loop5: detected capacity change from 0 to 4 [ 1202.035509][T20944] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1202.047640][T20944] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0011000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) 21:43:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) 21:43:47 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x700, 0x0) 21:43:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) 21:43:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r2, 0xd4fe000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1202.592067][T20970] loop5: detected capacity change from 0 to 4 [ 1202.600103][T20970] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1202.612342][T20970] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r2, 0xd4fe000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 21:43:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r2, 0xd4fe000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 1202.747865][T20970] loop5: detected capacity change from 0 to 4 [ 1202.766172][T20970] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1202.778269][T20970] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0012000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1202.982522][T21003] loop5: detected capacity change from 0 to 4 [ 1202.996537][T21003] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.008868][T21003] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:48 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfc00, 0x0) 21:43:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0014000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1203.068027][T21003] loop5: detected capacity change from 0 to 4 [ 1203.084268][T21003] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.096353][T21003] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x535c, 0x0, 0x1, 0x28e, 0x0, r1}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x6a91, 0x200043) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, r2, 0xd4fe000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r3) [ 1203.215290][T21020] loop5: detected capacity change from 0 to 4 [ 1203.248616][T21020] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.260690][T21020] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1203.368558][T21020] loop5: detected capacity change from 0 to 4 [ 1203.395433][T21020] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.407844][T21020] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:48 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:48 executing program 2 (fault-call:6 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:48 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x700, 0x0) 21:43:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0019000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:48 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xff00, 0x0) [ 1203.597781][T21048] FAULT_INJECTION: forcing a failure. [ 1203.597781][T21048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.610902][T21048] CPU: 0 PID: 21048 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1203.619678][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.630211][T21048] Call Trace: [ 1203.633521][T21048] dump_stack+0x137/0x19d [ 1203.637895][T21048] should_fail+0x23c/0x250 [ 1203.642349][T21048] should_fail_usercopy+0x16/0x20 [ 1203.647482][T21048] _copy_from_user+0x1c/0xd0 [ 1203.652168][T21048] __x64_sys_io_uring_setup+0x4b/0x120 [ 1203.658208][T21048] ? fput+0x2d/0x130 [ 1203.662362][T21048] ? ksys_write+0x157/0x180 [ 1203.666966][T21048] ? fpregs_assert_state_consistent+0x7d/0x90 [ 1203.673880][T21048] ? exit_to_user_mode_prepare+0x65/0x190 [ 1203.681630][T21048] do_syscall_64+0x4a/0x90 [ 1203.686167][T21048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1203.692194][T21048] RIP: 0033:0x4665d9 [ 1203.696102][T21048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.716156][T21048] RSP: 002b:00007f2243024188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1203.724583][T21048] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1203.732627][T21048] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000006243 21:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:49 executing program 3 (fault-call:3 fault-nth:0): io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1203.740708][T21048] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.748748][T21048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.756847][T21048] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 [ 1203.776370][T21052] loop5: detected capacity change from 0 to 4 21:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1203.787448][T21052] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.799744][T21052] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:49 executing program 2 (fault-call:6 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:49 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1203.899731][T21052] loop5: detected capacity change from 0 to 4 [ 1203.907330][T21052] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.919454][T21052] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1204.035395][T21082] FAULT_INJECTION: forcing a failure. [ 1204.035395][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.048217][T21082] CPU: 0 PID: 21082 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1204.057018][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.067969][T21082] Call Trace: [ 1204.071255][T21082] dump_stack+0x137/0x19d [ 1204.075610][T21082] should_fail+0x23c/0x250 [ 1204.080046][T21082] __should_failslab+0x81/0x90 [ 1204.084876][T21082] ? io_uring_create+0x120/0x18d0 [ 1204.089921][T21082] should_failslab+0x5/0x20 [ 1204.094528][T21082] kmem_cache_alloc_trace+0x49/0x310 [ 1204.099867][T21082] io_uring_create+0x120/0x18d0 [ 1204.104741][T21082] ? vfs_write+0x50c/0x770 [ 1204.109264][T21082] ? should_fail+0xd6/0x250 [ 1204.113969][T21082] __x64_sys_io_uring_setup+0xe1/0x120 [ 1204.119519][T21082] do_syscall_64+0x4a/0x90 [ 1204.123993][T21082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1204.130037][T21082] RIP: 0033:0x4665d9 [ 1204.133992][T21082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.154834][T21082] RSP: 002b:00007f2243024188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1204.163265][T21082] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1204.171637][T21082] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000006243 21:43:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce001c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x7}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1204.179618][T21082] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.191109][T21082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.199835][T21082] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 [ 1204.216441][T21085] loop5: detected capacity change from 0 to 4 21:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1204.235792][T21085] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1204.247868][T21085] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1204.309817][T21085] loop5: detected capacity change from 0 to 4 [ 1204.319741][T21085] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1204.332046][T21085] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:49 executing program 4 (fault-call:0 fault-nth:0): io_uring_setup(0x6243, &(0x7f0000000140)) 21:43:49 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0022000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:49 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x40000, 0x0) 21:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x204}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1204.477267][T21108] loop5: detected capacity change from 0 to 4 21:43:49 executing program 2 (fault-call:6 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1204.556334][T21108] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1204.568511][T21108] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x402}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1204.622759][T21123] FAULT_INJECTION: forcing a failure. [ 1204.622759][T21123] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.635594][T21123] CPU: 0 PID: 21123 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1204.644911][T21123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.654981][T21123] Call Trace: [ 1204.658273][T21123] dump_stack+0x137/0x19d [ 1204.662712][T21123] should_fail+0x23c/0x250 [ 1204.667177][T21123] ? io_uring_create+0x190/0x18d0 [ 1204.672677][T21123] __should_failslab+0x81/0x90 [ 1204.677479][T21123] should_failslab+0x5/0x20 [ 1204.683597][T21123] __kmalloc+0x66/0x340 [ 1204.688243][T21123] ? kmem_cache_alloc_trace+0x215/0x310 [ 1204.693809][T21123] ? io_uring_create+0x120/0x18d0 [ 1204.698943][T21123] io_uring_create+0x190/0x18d0 [ 1204.703905][T21123] ? vfs_write+0x50c/0x770 [ 1204.708335][T21123] ? should_fail+0xd6/0x250 [ 1204.712911][T21123] __x64_sys_io_uring_setup+0xe1/0x120 [ 1204.718419][T21123] do_syscall_64+0x4a/0x90 [ 1204.723398][T21123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1204.729506][T21123] RIP: 0033:0x4665d9 [ 1204.733421][T21123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.753781][T21123] RSP: 002b:00007f2243024188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1204.762218][T21123] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 21:43:50 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)) 21:43:50 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x3, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1204.770482][T21123] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000006243 [ 1204.778521][T21123] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.786589][T21123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.796259][T21123] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 [ 1204.832691][T21108] loop5: detected capacity change from 0 to 4 [ 1204.841450][T21108] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1204.853971][T21108] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x406}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:50 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)) 21:43:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0025000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:50 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2}) 21:43:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x604}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:50 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x4, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1205.011259][T21145] loop5: detected capacity change from 0 to 4 [ 1205.024956][T21145] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1205.037356][T21145] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1205.087520][T21145] loop5: detected capacity change from 0 to 4 [ 1205.097971][T21145] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1205.110615][T21145] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:50 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x200000, 0x0) 21:43:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x700}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:50 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x7}) 21:43:50 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x5, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0027000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:50 executing program 2 (fault-call:6 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1205.429135][T21173] FAULT_INJECTION: forcing a failure. [ 1205.429135][T21173] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.441826][T21173] CPU: 1 PID: 21173 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1205.450678][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.460767][T21173] Call Trace: [ 1205.463353][T21179] loop5: detected capacity change from 0 to 4 [ 1205.464057][T21173] dump_stack+0x137/0x19d [ 1205.474499][T21173] should_fail+0x23c/0x250 [ 1205.478935][T21173] __should_failslab+0x81/0x90 [ 1205.481114][T21179] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1205.483716][T21173] ? io_uring_create+0x1e1/0x18d0 [ 1205.483746][T21173] should_failslab+0x5/0x20 [ 1205.495991][T21179] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1205.500961][T21173] kmem_cache_alloc_trace+0x49/0x310 [ 1205.521420][T21173] ? io_uring_create+0x190/0x18d0 [ 1205.526458][T21173] io_uring_create+0x1e1/0x18d0 [ 1205.531606][T21173] ? vfs_write+0x50c/0x770 [ 1205.536036][T21173] ? should_fail+0xd6/0x250 [ 1205.540544][T21173] __x64_sys_io_uring_setup+0xe1/0x120 [ 1205.546110][T21173] do_syscall_64+0x4a/0x90 [ 1205.550537][T21173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1205.556519][T21173] RIP: 0033:0x4665d9 [ 1205.560634][T21173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1205.580262][T21173] RSP: 002b:00007f2243024188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1205.588692][T21173] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1205.596787][T21173] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000006243 [ 1205.604842][T21173] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1205.612851][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.620921][T21173] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 21:43:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x900}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:50 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x8}) 21:43:51 executing program 2 (fault-call:6 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1205.689413][T21179] loop5: detected capacity change from 0 to 4 21:43:51 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x6, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1205.732152][T21179] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1205.744225][T21179] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1205.793337][T21201] FAULT_INJECTION: forcing a failure. [ 1205.793337][T21201] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.806260][T21201] CPU: 1 PID: 21201 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1205.815506][T21201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.826613][T21201] Call Trace: [ 1205.829967][T21201] dump_stack+0x137/0x19d [ 1205.834321][T21201] should_fail+0x23c/0x250 [ 1205.838760][T21201] __should_failslab+0x81/0x90 [ 1205.843551][T21201] ? io_uring_create+0x1e1/0x18d0 [ 1205.848608][T21201] should_failslab+0x5/0x20 [ 1205.853137][T21201] kmem_cache_alloc_trace+0x49/0x310 [ 1205.858983][T21201] ? io_uring_create+0x190/0x18d0 [ 1205.864034][T21201] io_uring_create+0x1e1/0x18d0 [ 1205.869194][T21201] ? vfs_write+0x50c/0x770 [ 1205.873622][T21201] ? should_fail+0xd6/0x250 [ 1205.878177][T21201] __x64_sys_io_uring_setup+0xe1/0x120 [ 1205.883662][T21201] do_syscall_64+0x4a/0x90 [ 1205.888272][T21201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1205.894187][T21201] RIP: 0033:0x4665d9 [ 1205.898178][T21201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1205.917975][T21201] RSP: 002b:00007f2243024188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1205.926410][T21201] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1205.934748][T21201] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000006243 [ 1205.942737][T21201] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1205.950717][T21201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.958697][T21201] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 21:43:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x1000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:51 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9}) 21:43:51 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x3665c4, 0x0) 21:43:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:51 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x164}) 21:43:51 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x7, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:51 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x204}) 21:43:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce002e000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:51 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x29a}) 21:43:51 executing program 2 (fault-call:6 fault-nth:5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x6040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:51 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x402}) [ 1206.275064][T21237] loop5: detected capacity change from 0 to 4 [ 1206.300124][T21237] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1206.313100][T21237] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:51 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x8, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1206.401124][T21237] loop5: detected capacity change from 0 to 4 [ 1206.408729][T21237] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1206.416418][T21252] FAULT_INJECTION: forcing a failure. [ 1206.416418][T21252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1206.421212][T21237] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:51 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x1000000, 0x0) [ 1206.434420][T21252] CPU: 1 PID: 21252 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1206.452671][T21252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.462742][T21252] Call Trace: [ 1206.466054][T21252] dump_stack+0x137/0x19d [ 1206.470441][T21252] should_fail+0x23c/0x250 [ 1206.474874][T21252] __alloc_pages+0x102/0x320 [ 1206.479488][T21252] alloc_pages+0x21d/0x310 [ 1206.484047][T21252] __get_free_pages+0x8/0x30 [ 1206.488647][T21252] io_uring_create+0x887/0x18d0 [ 1206.493597][T21252] ? should_fail+0xd6/0x250 [ 1206.498110][T21252] __x64_sys_io_uring_setup+0xe1/0x120 [ 1206.503688][T21252] do_syscall_64+0x4a/0x90 [ 1206.508326][T21252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1206.516704][T21252] RIP: 0033:0x4665d9 [ 1206.520605][T21252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.540432][T21252] RSP: 002b:00007f2243024188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 21:43:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x7000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:51 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x406}) [ 1206.548879][T21252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1206.556917][T21252] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000006243 [ 1206.564904][T21252] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.573838][T21252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.581854][T21252] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 21:43:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0045000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:51 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x9, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:51 executing program 2 (fault-call:6 fault-nth:6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:52 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x604}) [ 1206.706529][T21270] loop5: detected capacity change from 0 to 4 [ 1206.716172][T21278] FAULT_INJECTION: forcing a failure. [ 1206.716172][T21278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.729356][T21278] CPU: 0 PID: 21278 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1206.738564][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.748636][T21278] Call Trace: [ 1206.751920][T21278] dump_stack+0x137/0x19d [ 1206.756281][T21278] should_fail+0x23c/0x250 [ 1206.760880][T21278] should_fail_usercopy+0x16/0x20 [ 1206.765934][T21278] _copy_to_user+0x1c/0x90 [ 1206.770392][T21278] simple_read_from_buffer+0xab/0x120 [ 1206.775780][T21278] proc_fail_nth_read+0xf6/0x140 [ 1206.780815][T21278] ? rw_verify_area+0x136/0x250 [ 1206.785858][T21278] ? proc_fault_inject_write+0x200/0x200 [ 1206.791518][T21278] vfs_read+0x154/0x5d0 [ 1206.795688][T21278] ? should_fail+0xd6/0x250 [ 1206.800198][T21278] ? __fget_light+0x21b/0x260 [ 1206.804974][T21278] ? __cond_resched+0x11/0x40 [ 1206.809665][T21278] ksys_read+0xce/0x180 [ 1206.813854][T21278] __x64_sys_read+0x3e/0x50 [ 1206.818548][T21278] do_syscall_64+0x4a/0x90 [ 1206.823065][T21278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1206.829014][T21278] RIP: 0033:0x41935c [ 1206.832911][T21278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1206.852794][T21278] RSP: 002b:00007f2243024170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1206.861327][T21278] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 1206.869318][T21278] RDX: 000000000000000f RSI: 00007f22430241e0 RDI: 0000000000000004 [ 1206.877304][T21278] RBP: 00007f22430241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.885323][T21278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.893298][T21278] R13: 00007ffc473b915f R14: 00007f2243024300 R15: 0000000000022000 21:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xffffffff}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1206.907043][T21270] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1206.919095][T21270] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:52 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2000000, 0x0) 21:43:52 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x700}) 21:43:52 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xa, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0048000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1207.045777][T21270] loop5: detected capacity change from 0 to 4 [ 1207.057000][T21270] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1207.069280][T21270] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:52 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x900}) 21:43:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:52 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xb, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1207.168429][T21318] loop5: detected capacity change from 0 to 4 [ 1207.191245][T21318] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1207.203314][T21318] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:52 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x6401}) 21:43:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x7}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1207.333018][T21318] loop5: detected capacity change from 0 to 4 [ 1207.365550][T21318] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1207.377728][T21318] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:53 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x7000000, 0x0) 21:43:53 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9a02}) 21:43:53 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce004c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:53 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x1000000}) 21:43:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1208.078120][T21366] loop5: detected capacity change from 0 to 4 [ 1208.096023][T21366] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1208.108170][T21366] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x204}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:53 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xd, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:53 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2000000}) [ 1208.190414][T21366] loop5: detected capacity change from 0 to 4 [ 1208.198016][T21366] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1208.211680][T21366] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x402}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:53 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10000000, 0x0) 21:43:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0060000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:53 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2040000}) 21:43:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x406}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:53 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:53 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x6040000}) [ 1208.446122][T21400] loop5: detected capacity change from 0 to 4 [ 1208.466693][T21400] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1208.479028][T21400] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:53 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x7000000}) 21:43:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x604}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1208.546904][T21400] loop5: detected capacity change from 0 to 4 [ 1208.554256][T21400] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1208.566540][T21400] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0068000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1208.700310][T21436] loop5: detected capacity change from 0 to 4 [ 1208.711269][T21436] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1208.723727][T21436] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:54 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x40000000, 0x0) 21:43:54 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xf, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x700}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:54 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x8000000}) 21:43:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce006c000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x49, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0074000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1208.864747][T21459] loop5: detected capacity change from 0 to 4 [ 1208.875047][T21459] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1208.888767][T21459] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x900}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:54 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9000000}) 21:43:54 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x10, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x92, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1209.023255][T21479] loop5: detected capacity change from 0 to 4 21:43:54 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x64010000}) [ 1209.063124][T21479] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1209.075209][T21479] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1209.205354][T21479] loop5: detected capacity change from 0 to 4 [ 1209.220407][T21479] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1209.232490][T21479] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:54 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xc4653600, 0x0) 21:43:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x1000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:54 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x11, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:54 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9a020000}) 21:43:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce007a000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:54 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xffffffff}) 21:43:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x164, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1209.431571][T21516] loop5: detected capacity change from 0 to 4 [ 1209.466282][T21516] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1209.479210][T21516] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:54 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)) 21:43:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x204, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1209.675330][T21516] loop5: detected capacity change from 0 to 4 [ 1209.702265][T21516] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1209.714862][T21516] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x29a, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2}) 21:43:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x6040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:55 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1001, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:55 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xe0ffffff, 0x0) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x7}) 21:43:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x7000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0004020f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x402, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:55 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x3b00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x8}) [ 1210.018795][T21579] loop5: detected capacity change from 0 to 4 [ 1210.029126][T21579] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1210.041219][T21579] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x406, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:55 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfc000000, 0x0) 21:43:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000030f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9}) 21:43:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x604, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:55 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x3d00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x164}) 21:43:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x204}) 21:43:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1210.338378][T21620] loop5: detected capacity change from 0 to 4 [ 1210.351966][T21620] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1210.364789][T21620] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:55 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x3f00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:55 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x29a}) [ 1210.479579][T21620] loop5: detected capacity change from 0 to 4 [ 1210.492739][T21620] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1210.505473][T21620] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:56 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfe80ffff, 0x0) 21:43:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x900, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:56 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xd500, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:56 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x402}) 21:43:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0002040f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:56 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x406}) [ 1210.796074][T21666] loop5: detected capacity change from 0 to 4 [ 1210.819768][T21666] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1210.832033][T21666] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0006040f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:56 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xd600, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1210.993622][T21690] loop5: detected capacity change from 0 to 4 21:43:56 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x604}) [ 1211.034976][T21690] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1211.047156][T21690] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1211.204199][T21690] loop5: detected capacity change from 0 to 4 [ 1211.216671][T21690] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1211.228876][T21690] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:56 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0ffff, 0x0) 21:43:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:56 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xd700, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:56 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x700}) 21:43:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0010040f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1211.485014][T21720] loop5: detected capacity change from 0 to 4 [ 1211.512306][T21720] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1211.524595][T21720] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:56 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xd800, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:56 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x900}) 21:43:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000050f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1211.666739][T21739] loop5: detected capacity change from 0 to 4 [ 1211.683237][T21739] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1211.695332][T21739] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x6401}) [ 1211.742457][T21739] loop5: detected capacity change from 0 to 4 [ 1211.761469][T21739] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1211.773570][T21739] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9a02}) 21:43:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000060f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:57 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xd900, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x204}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:57 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xff000000, 0x0) 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x1000000}) 21:43:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x402}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1212.070083][T21774] loop5: detected capacity change from 0 to 4 [ 1212.083766][T21774] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1212.095848][T21774] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:57 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xda00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0004060f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x4900, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2000000}) [ 1212.312637][T21799] loop5: detected capacity change from 0 to 4 [ 1212.341629][T21799] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1212.353777][T21799] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:57 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffff0000, 0x0) 21:43:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x406}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x6401, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:57 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xdb00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000070f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2040000}) 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x6040000}) [ 1212.552655][T21821] loop5: detected capacity change from 0 to 4 21:43:57 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x7000000}) 21:43:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x604}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1212.604960][T21821] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1212.617034][T21821] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:57 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfdef, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9200, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x8000000}) [ 1212.760578][T21821] loop5: detected capacity change from 0 to 4 [ 1212.786151][T21821] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1212.798252][T21821] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:58 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffff80fe, 0x0) 21:43:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x700}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:58 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfdfc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9000000}) 21:43:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000090f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9a02, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x900}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x64010000}) [ 1213.046857][T21871] ================================================================== [ 1213.054979][T21871] BUG: KCSAN: data-race in compact_zone / compact_zone [ 1213.061838][T21871] [ 1213.064194][T21871] write to 0xffff88823fffad90 of 8 bytes by task 21869 on cpu 0: [ 1213.071907][T21871] compact_zone+0x1496/0x1d30 [ 1213.076618][T21871] try_to_compact_pages+0x317/0x850 [ 1213.082009][T21871] __alloc_pages_direct_compact+0x61/0x330 [ 1213.087831][T21871] __alloc_pages_slowpath+0x5d4/0xb70 [ 1213.093232][T21871] __alloc_pages+0x25e/0x320 [ 1213.097853][T21871] alloc_pages+0x21d/0x310 [ 1213.102282][T21871] __get_free_pages+0x8/0x30 [ 1213.106911][T21871] io_uring_create+0x9b9/0x18d0 [ 1213.111776][T21871] __x64_sys_io_uring_setup+0xe1/0x120 [ 1213.117246][T21871] do_syscall_64+0x4a/0x90 [ 1213.121764][T21871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1213.127676][T21871] [ 1213.129999][T21871] read to 0xffff88823fffad90 of 8 bytes by task 21871 on cpu 1: [ 1213.137761][T21871] compact_zone+0x1472/0x1d30 [ 1213.142460][T21871] try_to_compact_pages+0x317/0x850 [ 1213.147765][T21871] __alloc_pages_direct_compact+0x61/0x330 [ 1213.153585][T21871] __alloc_pages_slowpath+0x5d4/0xb70 [ 1213.158973][T21871] __alloc_pages+0x25e/0x320 [ 1213.163681][T21871] alloc_pages+0x21d/0x310 [ 1213.168128][T21871] __get_free_pages+0x8/0x30 [ 1213.172733][T21871] io_uring_create+0x887/0x18d0 [ 1213.177943][T21871] __x64_sys_io_uring_setup+0xe1/0x120 [ 1213.183415][T21871] do_syscall_64+0x4a/0x90 [ 1213.187838][T21871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1213.193740][T21871] 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9a020000}) [ 1213.196056][T21871] Reported by Kernel Concurrency Sanitizer on: [ 1213.202545][T21871] CPU: 1 PID: 21871 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0 [ 1213.212456][T21871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.222537][T21871] ================================================================== 21:43:58 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfdfe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1213.331658][T21881] loop5: detected capacity change from 0 to 4 [ 1213.361431][T21881] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) [ 1213.373911][T21881] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:58 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffffc0fe, 0x0) 21:43:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)) [ 1213.455366][T21881] loop5: detected capacity change from 0 to 4 [ 1213.462868][T21881] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1213.474939][T21881] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000a0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:58 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfdff, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:58 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) [ 1213.616519][T21921] loop5: detected capacity change from 0 to 4 [ 1213.639583][T21921] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1213.651905][T21921] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:59 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfe00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:59 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffffffe0, 0x0) 21:43:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:59 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7}) [ 1213.770458][T21921] loop5: detected capacity change from 0 to 4 [ 1213.777570][T21921] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1213.793739][T21921] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000b0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:59 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x8800000, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:59 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}) 21:43:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1213.950681][T21969] loop5: detected capacity change from 0 to 4 [ 1213.966350][T21969] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1213.978481][T21969] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1214.022895][T21969] loop5: detected capacity change from 0 to 4 [ 1214.034204][T21969] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1214.046313][T21969] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:59 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9}) 21:43:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:59 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x20000601, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1214.190372][T21999] loop5: detected capacity change from 0 to 4 [ 1214.219065][T21999] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1214.231265][T21999] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:59 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffff00000000, 0x0) 21:43:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000d0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:43:59 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x7ffff000, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:59 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x164}) 21:43:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x6040000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1214.424291][T22029] loop5: detected capacity change from 0 to 4 [ 1214.454952][T22029] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:43:59 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x204}) [ 1214.467184][T22029] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:43:59 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xffff8001, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:43:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:43:59 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x4000000000000, 0x0) 21:43:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:43:59 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x29a}) [ 1214.628878][T22029] loop5: detected capacity change from 0 to 4 [ 1214.653714][T22029] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1214.666424][T22029] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000e0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:00 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffdef, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:00 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x402}) 21:44:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1214.805659][T22081] loop5: detected capacity change from 0 to 4 [ 1214.856108][T22081] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1214.868447][T22081] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:00 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffdfc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:00 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x406}) 21:44:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:00 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x20000000000000, 0x0) 21:44:00 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x604}) 21:44:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1215.064405][T22081] loop5: detected capacity change from 0 to 4 [ 1215.078555][T22081] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1215.090655][T22081] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00000f0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:00 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffdfe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x204}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:00 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x700}) 21:44:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1215.257722][T22139] loop5: detected capacity change from 0 to 4 [ 1215.315475][T22139] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1215.327636][T22139] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:00 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x900}) 21:44:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x402}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:00 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x3665c4ffffffff, 0x0) 21:44:00 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffdff, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:00 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6401}) [ 1215.494538][T22139] loop5: detected capacity change from 0 to 4 [ 1215.509494][T22139] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1215.521606][T22139] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0004100f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x49000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x406}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1215.622705][T22196] loop5: detected capacity change from 0 to 4 [ 1215.651878][T22196] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:44:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0020100f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9a02}) [ 1215.663981][T22196] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:01 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffe00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000}) 21:44:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x64010000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x604}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1215.797799][T22210] loop5: detected capacity change from 0 to 4 [ 1215.816994][T22210] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1215.829408][T22210] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:01 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x100000000000000, 0x0) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000000}) 21:44:01 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xffffffff000, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x92000000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1215.973604][T22210] loop5: detected capacity change from 0 to 4 [ 1215.996156][T22210] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1216.008510][T22210] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2040000}) 21:44:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000110f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x9a020000, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x900}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6040000}) 21:44:01 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x7ffffffffffff, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:01 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x200000000000000, 0x0) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7000000}) 21:44:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:01 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xffff8881027429a8, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1216.345477][T22282] loop5: detected capacity change from 0 to 4 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000000}) [ 1216.433133][T22282] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1216.445971][T22282] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000120f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:01 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xffff888102743128, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:01 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9000000}) 21:44:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1216.625636][T22282] loop5: detected capacity change from 0 to 4 [ 1216.635861][T22282] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1216.647947][T22282] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:02 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x700000000000000, 0x0) [ 1216.733920][T22325] loop5: detected capacity change from 0 to 4 [ 1216.767134][T22325] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:44:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:02 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x64010000}) 21:44:02 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xffff8881027438a8, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1216.779307][T22325] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6040000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1216.847118][T22325] loop5: detected capacity change from 0 to 4 [ 1216.865690][T22325] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1216.877748][T22325] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:02 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9a020000}) 21:44:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000140f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:02 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffffffffffdef, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:02 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}) [ 1217.089826][T22363] loop5: detected capacity change from 0 to 4 [ 1217.143760][T22363] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1217.155861][T22363] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9000000}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:02 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x1000000000000000, 0x0) 21:44:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:02 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)) 21:44:02 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffffffffffdfc, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1217.272828][T22363] loop5: detected capacity change from 0 to 4 [ 1217.294261][T22363] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1217.306350][T22363] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000190f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1217.402826][T22404] ================================================================== [ 1217.410966][T22404] BUG: KCSAN: data-race in compact_zone / compact_zone [ 1217.417836][T22404] [ 1217.420167][T22404] write to 0xffff88823fffad90 of 8 bytes by task 22406 on cpu 0: [ 1217.427884][T22404] compact_zone+0x1496/0x1d30 [ 1217.432579][T22404] try_to_compact_pages+0x317/0x850 [ 1217.437881][T22404] __alloc_pages_direct_compact+0x61/0x330 [ 1217.443708][T22404] __alloc_pages_slowpath+0x5d4/0xb70 [ 1217.449189][T22404] __alloc_pages+0x25e/0x320 [ 1217.453973][T22404] alloc_pages+0x21d/0x310 [ 1217.458403][T22404] __get_free_pages+0x8/0x30 [ 1217.463009][T22404] io_uring_create+0x887/0x18d0 [ 1217.467889][T22404] __x64_sys_io_uring_setup+0xe1/0x120 [ 1217.473401][T22404] do_syscall_64+0x4a/0x90 [ 1217.477838][T22404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1217.483760][T22404] [ 1217.486284][T22404] read to 0xffff88823fffad90 of 8 bytes by task 22404 on cpu 1: [ 1217.493932][T22404] compact_zone+0x1472/0x1d30 [ 1217.498653][T22404] try_to_compact_pages+0x317/0x850 [ 1217.503867][T22404] __alloc_pages_direct_compact+0x61/0x330 [ 1217.509717][T22404] __alloc_pages_slowpath+0x5d4/0xb70 [ 1217.515115][T22404] __alloc_pages+0x25e/0x320 [ 1217.519720][T22404] alloc_pages+0x21d/0x310 [ 1217.525395][T22404] __get_free_pages+0x8/0x30 [ 1217.530000][T22404] io_uring_create+0x9b9/0x18d0 [ 1217.534870][T22404] __x64_sys_io_uring_setup+0xe1/0x120 [ 1217.540351][T22404] do_syscall_64+0x4a/0x90 [ 1217.544791][T22404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1217.550703][T22404] 21:44:02 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2}) 21:44:02 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffffffffffdfe, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1217.553028][T22404] Reported by Kernel Concurrency Sanitizer on: [ 1217.559196][T22404] CPU: 1 PID: 22404 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0 [ 1217.568168][T22404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.578469][T22404] ================================================================== 21:44:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:02 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7}) [ 1217.632032][T22413] loop5: detected capacity change from 0 to 4 [ 1217.641373][T22413] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1217.653900][T22413] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1217.758028][T22413] loop5: detected capacity change from 0 to 4 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8}) 21:44:03 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffffffffffdff, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1217.810131][T22413] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1217.822229][T22413] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:03 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x4000000000000000, 0x0) 21:44:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00001c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv2(r0, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/219, 0xdb}, {&(0x7f0000000a80)=""/65, 0x41}], 0x2, 0x64, 0x6, 0x1d) fcntl$getflags(r1, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x4000, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1], 0x8) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8345ffbb2a8c930faffffffffffffff", @ANYRES16=r3, @ANYBLOB="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"], 0x4a8}}, 0x20000045) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9}) 21:44:03 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xfffffffffffffe00, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1218.040533][T22459] loop5: detected capacity change from 0 to 4 [ 1218.072296][T22459] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x164}) [ 1218.085521][T22459] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x204}) [ 1218.127757][T22459] loop5: detected capacity change from 0 to 4 21:44:03 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0xffffffffffffffff, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x29a}) [ 1218.182231][T22459] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.194555][T22459] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:03 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x8000000000000000, 0x0) 21:44:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x402}) 21:44:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000200f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:03 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:03 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x101b81, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x48841}, 0x4000000) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() keyctl$chown(0x4, 0x0, r1, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x0, 0x1, 0x3f, 0x5, 0x3]}, &(0x7f0000000000)=0x54) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0xf, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1218.477177][T22504] loop5: detected capacity change from 0 to 4 [ 1218.493373][T22504] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.505546][T22504] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:03 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x406}) 21:44:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4, 0xd, 0x0, 0x0}]}]}]}, 0x20}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x78, r4}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x29, 0x5, 0x0, 0x20, 0x0, @loopback, @remote, 0x10, 0x80, 0x9, 0xeb8f}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7f, 0x7, 0x10, @loopback, @remote, 0x10, 0x8000, 0xffff5915, 0x5}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c030000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fedbdf2501000000440102800c0001800800010007000000240001800800010001000000080001000100000008000100050000000800010007000000440001800800010007000000080001000500000008000100070000000800010005000000080001000100000008000100040000000800010004000000080001000600000024000180080001000800000008000100040000000800010003000000080001000600000024000180080001000600000008000100030000000800010008000000080001000100000014000180080001000000000008000100000000001c0001800800010002000000080001000800000008000100040000002400018008000100010000000800010003000000080001000700000008000100000000000c000180080001000400000024000180080001000100000008000100050000000800010001000000080001000800000048000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020062617461647630000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000400030004000300700001801400020076657468305f766c616e0000000000000800030002000000140002007663616e30000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08f200006d707a1dfe49f32e26e60d203f62459d07570c94cf0aa8724101826bd411a09150f6fa7acb64025511ce770db68dac621dd56b731e098d7d3af0dec4f48e35873e366f2976fb9e56690ad1ee98f7a787a49945a0c6fff3a330ae24780b4419471667341ab41db8fe99befb1b33d0fcb6ed0cc87141f53eb72c4968ac110243ab8c34232cda70249ad44674be04d1421aff52fd878e6bf6d393259f7caa735cadbad1f3", @ANYRES32=r5, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="04000300400001800800030001000000080003000200000008000300020000001400020076657468315f746f5f6272696467650008000300070000000800030002000000880002803c00018008000100060000000800010004000000080001000100000008000100040000000800010001000000080001000200000008000100040000001400018008000100070000000800010003000000140001800800010006000000080001000500000014000180080001000200000008000100010000000c00018008000100050000003800018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000"/20], 0x31c}, 0x1, 0x0, 0x0, 0x4}, 0x40850) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x49, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1218.559823][T22504] loop5: detected capacity change from 0 to 4 [ 1218.567387][T22504] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.579663][T22504] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:03 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x604}) 21:44:04 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xe0ffffff00000000, 0x0) 21:44:04 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) 21:44:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x92, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0010200f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:04 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:04 executing program 1: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x2) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x145082, 0x20) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1218.926776][T22561] loop5: detected capacity change from 0 to 4 [ 1218.957167][T22561] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 21:44:04 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x900}) [ 1218.969215][T22561] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x50, r1, 0x5bef1000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x164, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:04 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x5, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:04 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6401}) [ 1219.126980][T22561] loop5: detected capacity change from 0 to 4 [ 1219.139059][T22561] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1219.151284][T22561] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:04 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfc00000000000000, 0x0) 21:44:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x204, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, r1}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) r3 = dup2(r2, r2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:04 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x6, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:04 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9a02}) 21:44:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000220f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x29a, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, {0x2, 0x4e21, @empty}, 0x26, 0x0, 0x0, 0x0, 0x20, 0x0, 0x80000001, 0xab66}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r1, &(0x7f0000000280)="e92340d95eeae41a8daf5690fccb44cb2f27f2dff2cae714a87d7f07af29a10972ed19c4f9fc1562af4e54852ad31f60b11e8b505fda646a3d411e1d9b1fdfd061e198c2675b3e52f41dff9c8868fa26358724540907b0298e604b6a47f49ade72f6477cb7c8276bba5f08ed9ad9212526c53d647e9a5fe13666a4e740fb4bb30e13cbe716ed21", 0x87, 0x80, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:04 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 1219.425451][T22620] loop5: detected capacity change from 0 to 4 21:44:04 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:04 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 1219.466843][T22620] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1219.479503][T22620] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000250f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1219.644733][T22644] loop5: detected capacity change from 0 to 4 [ 1219.670916][T22644] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1219.683389][T22644] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:05 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfe80ffff00000000, 0x0) 21:44:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x402, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:05 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2040000}) 21:44:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x6243, &(0x7f0000000740)) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f00000005c0)=""/194, 0xc2}], 0x5, 0x7, 0x1) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:05 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x8, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000270f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) [ 1219.816364][T22662] loop5: detected capacity change from 0 to 4 21:44:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x406, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:05 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6040000}) [ 1219.871393][T22662] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1219.883570][T22662] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:05 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x9, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1219.956569][T22662] loop5: detected capacity change from 0 to 4 [ 1219.972535][T22662] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1219.984871][T22662] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x604, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:05 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7000000}) 21:44:05 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0ffff00000000, 0x0) 21:44:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x0, 0x9fc}) 21:44:05 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00002e0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:05 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000000}) 21:44:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x700, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:06 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9000000}) 21:44:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x900, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1220.740710][T22718] loop5: detected capacity change from 0 to 4 [ 1220.753134][T22718] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1220.765264][T22718] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00003f0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:06 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xb, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @private}, &(0x7f0000000080)=0x8) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x4}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:06 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x64010000}) [ 1220.923281][T22740] loop5: detected capacity change from 0 to 4 [ 1220.939470][T22740] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1220.959151][T22740] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:06 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xff00000000000000, 0x0) 21:44:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000400f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:06 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9a020000}) 21:44:06 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xc, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000450f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000380)="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", 0xfb, 0x2002c014, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000280)=""/249, &(0x7f0000000000)=0xf9) io_uring_setup(0x6245, &(0x7f0000000100)={0x0, 0x6d6f, 0x1, 0x0, 0x0, 0x0, r1}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 1221.678145][T22770] loop5: detected capacity change from 0 to 4 [ 1221.697290][T22770] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1221.710350][T22770] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:07 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) 21:44:07 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xd, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1221.799508][T22784] loop5: detected capacity change from 0 to 4 [ 1221.808357][T22784] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1221.821787][T22784] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:07 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffffffff00000000, 0x0) 21:44:07 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xe, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce0000480f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:07 executing program 4: r0 = io_uring_setup(0x6243, &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xba, 0x0, &(0x7f0000000000)=[r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x4) [ 1221.948599][T22784] loop5: detected capacity change from 0 to 4 [ 1221.956268][T22784] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1221.968339][T22784] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x4900, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:07 executing program 4: io_uring_setup(0x6243, &(0x7f0000000000)={0x0, 0x0, 0x10}) [ 1222.114346][T22824] loop5: detected capacity change from 0 to 4 [ 1222.158953][T22824] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1222.171174][T22824] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) [ 1222.291109][T22824] loop5: detected capacity change from 0 to 4 [ 1222.306131][T22824] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1222.318290][T22824] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x338}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) io_uring_setup(0x9ed, &(0x7f0000000280)={0x0, 0x33a2, 0x0, 0x2, 0x1d4, 0x0, r3}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:07 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0xf, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) 21:44:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x6401, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:07 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) socket$inet6(0xa, 0x5, 0x80000000) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xffffffffc4653600, 0x0) 21:44:07 executing program 4: r0 = io_uring_setup(0x1006243, &(0x7f0000000140)={0x0, 0xfffffffc, 0x0, 0x0, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x18400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_setup(0x5510, &(0x7f00000000c0)={0x0, 0xed92, 0x0, 0x1, 0x2ef, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x400, 0x0, &(0x7f0000000040)=[r0, r2]}, 0x2) 21:44:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000200100000c000000ce00004c0f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@data_journal}]}) 21:44:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9200, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1222.670721][T22857] loop5: detected capacity change from 0 to 4 [ 1222.680791][T22857] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1222.693556][T22857] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:08 executing program 4: r0 = io_uring_setup(0x6243, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) 21:44:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x3a8b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x30f}) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:08 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000600)="9b", 0x1}]) [ 1222.780252][T22857] loop5: detected capacity change from 0 to 4 [ 1222.794613][T22857] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1222.806822][T22857] EXT4-fs (loop5): bad geometry: block count 288 exceeds size of device (2 blocks) 21:44:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)={0x0, 0x0, 0x9a02, 0x0, 0x0, 0x0, r1}) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:44:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/112, &(0x7f0000000240)=0x70) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x6243, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x29, &(0x7f0000000000)=0xffffffff, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x88000, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000002c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000300)=r1, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) mknodat$null(r4, &(0x7f0000000100)='./file0\x00', 0x837cb7e356195c69, 0x103) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000380000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0xd4fe000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) 21:44:08 executing program 4: io_uring_setup(0x6243, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000000000000290000000b"], 0x18}, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000080)=""/166, 0xa6}], 0x3, 0x4, 0x7) [ 1222.944304][T22901] ================================================================== [ 1222.952439][T22901] BUG: KCSAN: data-race in compact_zone / compact_zone [ 1222.959836][T22901] [ 1222.962183][T22901] write to 0xffff88823fffad90 of 8 bytes by task 22897 on cpu 0: [ 1222.969896][T22901] compact_zone+0x1496/0x1d30 [ 1222.974923][T22901] try_to_compact_pages+0x317/0x850 [ 1222.980126][T22901] __alloc_pages_direct_compact+0x61/0x330 [ 1222.985951][T22901] __alloc_pages_slowpath+0x29a/0xb70 [ 1222.991362][T22901] __alloc_pages+0x25e/0x320 [ 1222.995957][T22901] alloc_pages+0x21d/0x310 [ 1223.000383][T22901] __get_free_pages+0x8/0x30 [ 1223.004982][T22901] io_uring_create+0x887/0x18d0 [ 1223.009849][T22901] __x64_sys_io_uring_setup+0xe1/0x120 [ 1223.015322][T22901] do_syscall_64+0x4a/0x90 [ 1223.019774][T22901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.025685][T22901] [ 1223.028004][T22901] read to 0xffff88823fffad90 of 8 bytes by task 22901 on cpu 1: [ 1223.035659][T22901] compact_zone+0x1472/0x1d30 [ 1223.040435][T22901] try_to_compact_pages+0x317/0x850 [ 1223.045645][T22901] __alloc_pages_direct_compact+0x61/0x330 [ 1223.051458][T22901] __alloc_pages_slowpath+0x29a/0xb70 [ 1223.060228][T22901] __alloc_pages+0x25e/0x320 [ 1223.064911][T22901] alloc_pages+0x21d/0x310 [ 1223.069507][T22901] __get_free_pages+0x8/0x30 [ 1223.074094][T22901] io_uring_create+0x9b9/0x18d0 [ 1223.078965][T22901] __x64_sys_io_uring_setup+0xe1/0x120 [ 1223.084431][T22901] do_syscall_64+0x4a/0x90 [ 1223.088863][T22901] entry_SYSCALL_64_after_hwframe+0x44/0xae