ev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e22}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:10 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040ff"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020006c0020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x0) 19:10:10 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1535.867518] EXT4-fs (loop3): #blocks per group too big: 1811947520 [ 1535.905459] EXT4-fs (loop3): #blocks per group too big: 1811947520 19:10:10 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000070020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x146371]}, 0x0) 19:10:10 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) write$input_event(r0, &(0x7f0000000100)={{0x77359400}, 0x0, 0x80, 0x3}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000)="99339f67428744e17ca08bfd53a11e31e9db0c3876bf429d0bc1322e8206be4b516594e09f9e8463286c8d6475f399c21ad08cf2da02d53e6a0547ca91b0137b68414ef2e1364a0737f441d772ac431eaeb40ea59b8f37889e5e", 0x5a, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = msgget(0x1, 0x104) msgsnd(r2, &(0x7f0000000180)={0x0, "aa16602d20a148f0006f126f7b7314be523573e5daa91bc316f98359fa6ee0aecfa925c508686f3ae0d9787664d3b07a8def76ae9f94d29f060c86164eba2b009853898a8bb252a183765be3572e1654a332af9c1513818b9c0d4458e9aec10247cebdd54f7a7eb966b69c939e7155091e2cb45ee87f296292414ba27230219d4c8731aa09daa9454268d8ec35eab05537017208808d939de7340d6e2677e768d0392fe0b72a1d4aaca939fd9dfebcc8892cd01ae82a53dfeff1027179dca967a44734a201818b3113b3e25242ed2ad4080b21cd0df60e20582b072aafdca7ee0758ff15c595d43a066f8f14778d44a03d984477"}, 0xfc, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1536.102163] EXT4-fs (loop3): #blocks per group too big: 117448704 19:10:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x28]}, 0x0) [ 1536.154398] EXT4-fs (loop3): #blocks per group too big: 117448704 19:10:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000e90920000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:10 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1536.336678] EXT4-fs (loop3): #blocks per group too big: 3909099520 19:10:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x0) [ 1536.420901] EXT4-fs (loop3): #blocks per group too big: 3909099520 19:10:10 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = semget$private(0x0, 0x7, 0x1) semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000000000)=""/56) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000060020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1536.596916] EXT4-fs (loop3): #blocks per group too big: 100671488 [ 1536.636568] EXT4-fs (loop3): #blocks per group too big: 100671488 19:10:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:11 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', "", [{0x20, "766574683100000000ffffffffffef00"}, {0x20, 'veth1_to_bond\x00'}], 0xa, "691ba9173e58c2c1528f8eee658de23103ad9a625c6ffd3f219ba4408bbf59725637623fc8bbcc7ef4"}, 0x4d) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1e}, 0x62, r2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x0) 19:10:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000060000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfeffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1536.902295] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1536.967533] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:11 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x0) 19:10:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000007420000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:11 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) uselib(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:11 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x104, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r3, r3) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000280), 0xc, &(0x7f0000000840)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYBLOB="752f9f76ae43c132bfcb2c844d15e88efb98f12144f35c306da04934748e2b21032e0dc4413c1d7667f12e41836c2d27de7d214c1f61da2cca00d03b507ea08262e72594dab6658a0379cdddff87524aaf57b774282d14e1d817d15e47676a94349178ebf5799e7b05d3ab491ccc72db4811a92d4e76ebaed3bbbc9705b1f20109321d67278d399bebeacefb0f093fa877ab57a79c5e278646315290c575f5768179ad39a28fba6cbcb34448d2467863136af06223b2a46437f4fb225aa9ce53ba94f49e9b78308cb74216aacab2ba2d06665719b2b7109cc615e486f21831e0511ca090fce96b43d2cde37af73cbc930d63", @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYBLOB="a7d1830374ec8e16c18fa3b3a1ffbb03113e9b6bf49b778f7d81069e976869b70a9a15e46d596e90e12134a1ef2c9d48e99ac3445c4e0ed8a90ac01997ab50bb8ac1df0500001b9c8eb20a0000cb475b0c25c318bcc217c5baa3a583b7d66b74254ce4e1689c5445e517efd3d5b337dc6f59a87a0d11be4fa3ecf98cac4311f755c9ab9a1def10052c6be43a066b73954f3194f443bcaa7e861d434ff3afe17e2514b12840e67927cb2fce3dfe7cf2f4d5561501394a95af3a0ed7132b59777ee8525c132dcf72c41a7040e8e5ca02f5e580b55fa4", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="b18ff378130b27f0ded6fed24c1abc06c821b87b71c1db07327c47f04fe39145fa1807fc067e086d62d2b2f22499069660b6e8ad8aa43320ada055fdb10b52d5c0e21f1a0da54813d303f1ea2486384df50fe5b6f1581e3205450d748711dcad637b5db7bcd52b43f1b2a10af11a25ffcff50c2ac3b7d3153a3fb8bc4b10b56de22df182e9d3e44bce7bba392dd0e3bb7f62a5089c9c", @ANYRESOCT=r1, @ANYRESOCT=r4, @ANYPTR, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESDEC], @ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r1], @ANYRESOCT=0x0], @ANYRES64=r3, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRESOCT=r3], 0xa}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000100070000805d56"], 0xc) [ 1537.323203] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:11 executing program 6: syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x100) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x1200000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1537.400321] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:11 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x200) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x0) [ 1537.480650] Unknown ioctl 44545 19:10:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000041020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1537.539930] Unknown ioctl 44545 19:10:12 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x800) r2 = socket(0x9, 0x1, 0x8) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x7ff, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1537.643459] EXT4-fs (loop3): #blocks per group too big: 67117056 [ 1537.675860] EXT4-fs (loop3): #blocks per group too big: 67117056 19:10:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:12 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19b5eb9033d0c560ab3ff6ed2720d286d13870efbdb68a50d1ef862754f6f2e282fbcf061d692e53d55ca127"], 0x1}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x2) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000380)={0x200, 0xabe, &(0x7f0000000040)="698351a277", &(0x7f0000001600)="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", 0x5, 0x1000}) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, 0x7, 0x1, 0x4}, 0xa) 19:10:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x0) 19:10:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000680020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:12 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000000)=""/126, &(0x7f00000000c0)=0x7e) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1537.953486] EXT4-fs (loop3): #blocks per group too big: 1744838656 [ 1537.998629] EXT4-fs (loop3): #blocks per group too big: 1744838656 19:10:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:12 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:12 executing program 6: socketpair(0xa, 0x3, 0x200, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000180)=0xbe) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40001, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x200000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x100, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x7ff, 0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000340)={0x1, 0x3b, 0xb, 0x15, 0x4, 0x8000, 0x0, 0x107}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000005c0)=0x0) r10 = getpid() ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000b40)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000b80)={0x0, 0x0}) r13 = gettid() sendmmsg$unix(r3, &(0x7f00000011c0)=[{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)="914179c7c9e8af084bf4ed973fa6f2b883c7151af46ed2a56a29e18740445908e0f810d7", 0x24}, {&(0x7f0000000480)="48c0389687d1c90a8dcb8451e675b5120c7da361b5a8b1c0e8264829f71a31006c65eceee37acb84b5f2f6791b98d6b2f2f66e5081cc2c17b6ad5500ed2c1e2bf434a4354f3b5b06dea271098531f4c5a46e21969c6b51709238620e087676f27be2fe9f891d55a2dd3adacbacb13a6a687801c179d127d3dadae25b3e5b578bb1cacd4d9629cefa72439e2e90b778ab1aa9e605fb55672c7af18e83d4e70bbc0277a2279c9eb346d26e646856ff372fe882490fa44f2058057918f5bbccc4212454abf80f8886d94e6544f30d5f148f03556af1acddfe1702cf372a10850d0a03daff86ceed4270ce7c3f0f5874f5d3", 0xf0}], 0x2, &(0x7f0000000600)=[@rights={0x20, 0x1, 0x1, [r0, r8, r8]}, @cred={0x20, 0x1, 0x2, r9, r5, r6}, @cred={0x20, 0x1, 0x2, r10, r5, r6}, @rights={0x28, 0x1, 0x1, [r0, r4, r8, r0, r7, r1]}], 0x88, 0x54}, {&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000780)="d17bf0", 0x3}, {&(0x7f00000007c0)="18eeb9dcc667b0118fbe6a", 0xb}, {&(0x7f0000000800)="3e18de88831efea72abe5fb6e2", 0xd}, {&(0x7f00000008c0)="300d9a93bd9a72ad033bd2cc177e14e5ddca120cb17efb50166819708580c66e34e3126859bc8d088c646e0c68c55509dc68f663cb4623e1a5a9dffeab6fb4fb06dfe9d08d6528ec8405898399875630654e80d2212e1ed4b13093528e8c6ef5458f69febb75973a62fc178afa02d667e87c1af6c4fe529b0ded8291916e75f265a9501505b22237ae21941a44a2b0ed40beaf05dc65c16f6097e8eb6328decbda27b1f09a7ae7d62478337530735a69346df0560a4c1ec4329b3f4d", 0xbc}, {&(0x7f0000000980)="b26b75e899a4702ec363dac9aacbb06833c4d3101564", 0x16}, {&(0x7f0000001600)="a241960f7efd581823c77928cae68fe78bb28732a73330989681f43e36e3d4e199b17ef5aa592ec9d9c3cdd07efc3a977edcb0562532c217e948c348e9be879ecc2f3006714cce5041e3a9b57ebb032c45db0d87911c1d31bfa4754aca68c5037e7edf500b084f735e7f45313e97f3d41b101158006ce88623dab9c3b2e9a3834410b75350e61e80ff5fc1c47150bfd54c5d4b3d399388c45d71095a8c3e497e451efe8f2c219f751b2e4f885b2d5551d23cd504dba113c412beaec92dfb6eeffcd045e8c53db139741a0c1449cf722184ef9a3d5554d4bbcaf1298028c58b6de42f7b0e75b64147aba43c6d9619a492b9061628c38d04c0991c5f040c46f9206c3d765fe3befd1d0b054b83d777bbf5dfb1d974befee3a61e45b43b344f8a738274ec398cc5a7c9645c4ac795312dc0189bdfb2741d1eb1faeea028e44df241babf7e7f3718b23b1e1eb42fd711e0d7eb1b7497d7b8a78c3c9d2a3e5ef091a4a8fadfdf038201dd3dd8922e2791cf75150e3c4a9b5a158d8b3c08c84f3c3f1e927bc7f3984b291993bd6e775e2497a7bf16dcced265ccfb4b126c72426ca1d53e65cdd0beff02bca76fd963161a46d5e2b42b6755812b7cdd12921bcf7f0efbfbb23b81748f9c1aa3fb8e3c2e55e7f2f58554de701c6e1787f5ed2e4367a42452184228cac44a194b33efe5f6bfffed69fcb976114c1d2ac4c69b006be8b5b2803c98a797397f6a69e93165b72e7ea8410157bb0194ab3edbba0b27e899e61c8dc89d3d9c9dc9beced0364fb61b26aeebb6ea1cade62fdb3755b35413b3f5605c58e801d58bd08927e38845981311561c836a4930a04c770e2e3419ab3fcb8319812af39430d0ca53b6c5f525edd71d572f2c8612341b985f3117c911fb7368269303e7a4ca24ee50580c86c589d3befa43d1ec265b62136257055835e5c363d6ef1c4e1ba0b60ddef4c8eb2d4699e6b14bed5feddb31c2611cb9a4cbdb1ec554c205366fa4f589fc2243d0b2c353290b0c0a3bee5c16bff55cbf4125d2d92c02acd9a4c58e9c6d7748b95e7e023df0819d567cbc5389a78b548e7c23403e450c678be598b0c13959134ef62dc13a88ee56407348abfd922818b35f60251e7a7987ea1df8b3cd2058e7cf54f75bba6b0c2706f391715994aff8515f1441890add66c460d3ee2edb8073c2496eb846af677281ac8ed94b69a586e7948c91347d9493e24e072dbd577c59b20b906735ab34f2f6e9f178d7ef1008f2fa45af605a914369b84cbafe80f5a9f8acfa3fbb8c0305467805c27c1eddf080f1d4b8cb8e7e79c20805d99680321786dd6916bdaf7f4b86f406c22cf2ab083326dbbeea41e0902af1e1eeb96e9af34be1359b5133d3910ca191853280c604eb920df2e1e6a4d300a3871876a97c63d31d66bc799842df7aab0a9289e77fe4bafccb20d87c554e6e147bbe10301765b8a4966a1521f937cfe167c32c9e4bec2e1e753bbc363a29d8b503e4c6a18db654e1b548181300cd665a3a66ca5515451612bc9b800c834e50d1b7dc8aa4c79edd471f142ff20696dcd5acf019f3a11b742e32236ac7ebff1919e50e44b552d7eb9fc30a3a767eec4ee4e2b36b991287819ba47783c274d22f9287bb36a5c04757a8166b5e4c107c60169f7b9635d5a8fe0c60f0a017e4ec071b04d54ca30166361804e60ee812e8c2f3a85150a5af6630321c3599d631a93e1b25d68d80a971fe5814b3db42710d163d25fd8718a0b2bd5ddca80477c6d778b16bb57482d8d28bb01ce1b1db2976c027fee92bd80182bc0903292050885f2d964cc09f68dc47cfe842650689c743ae5befad81714dd0098480b4306ae3ff6e3e865c4c28c18ebce1e1c965c8434565c7121aa4bbfd4df87ab48e741bbfd9712ce8d7d4429ecfa49515f98b01aad9cb0c24408316f9561a01875d5a3b5a927c74856d2a7207f012a1ef6dac591d2c7362c4e3a06ccd05364bc5e185b3fd68094797b0d3c481e1dc78f65fe28fea7ac5c103e04fe59e11a66bea9f763cb2d5dc3304ce5716a998f16cc4a69f088a669996f5503ff229e9fac2aa3963a27bf536ca2066a9cdff6272c09952e1cec927933093fcc69d889b6c4308740d6d85dac563f8247d7cc2995eb79c9834087d0d507e73e7d4527359c46068e76f2f55ec7ec600956a5eef875f251fc1d99f9b0f53335879b34b710f6eaaa62da6e719f234904aa81b1c6598b13f1fd1e704fbf0a0ffc4b8dd132cac21cad4c2b00a9b43e8ecdf88c4201fd16a5e372d26b6fa3a857cbe72bf532659cb6fb5ed75e15018ee47cb34719a7bb1fab06c9d7f53732974e438b20c755e350e87ddaba3e683f6e277468a842e2322e7eb93ddf5868164c344ad6206e90a97f39813776c66de3a4b7d9d8e8517847c58c5801a927dd38fab88241dc1f9311dc624902f6d8b07a37f7fa4390591ca1489bdcde5afe28ecad9197d8cffbb5580fd17381c1455a0f9b91aeccaa286e4e04482ae66c11ee9e5f065df8f5a5324c0a5bea73db019f485285454c08bd5b8a972c94677d0821717df2717503a1ac520b97c5bb8980a49da2a790ae6fa5cbd6f68825e816f18f430305a8dd1c1bbce22f58ee82448aedb74a10bb5383ab5e6b85d3dab859ed9805b6be7d60b61c5a2dbda6e88577eaf1528d1d13c5eda9c9bf6410dd5bc763d25fe73ddf44ca6be6b84367a659c076253e168fa4185dacd031b17f0514274e62ce8bdf491eb46827b1b9d9b7a07f8b560f390ac1c82a4a5b8af2c08929f78163fa9466fbe20a47e6e9e7edf23da56ec0f4f0430f64e90c8e943bfb6913c888bb87b06446244a6d39701604e9f5298ad4b981171ca5151819c31f9f4771bacfecf65babdfb3caf40978a4b2f2125a273f4c518f43336a503ec162d6a6547453a7f8d1c1ea493b3b5bfb26b1c02a91a4c774ee1008dc01e3a7c37e152ce3c876131dc0bbe75d18383f829b270f76beff4f2ba93297e0b4e83542dda92261d2cc6bb2cf215f3898aad0faa18c6251bb5f3c6ff216b7c4069514c0201fa2f61f719be695c2a4befaa4bab0aa0e83a7ba39030598fbe8610680b571dc3564b4ca00353f3e12cb21e98077a25e5ecb3014d0f2a15d59c7d550b6554e67ad5c9a1bef3efe56f4f1edcd5cbfe831fe1f60881c92e2df011a42fbb1f30684fea7da22ec91684343ce302c3eefef8cb9c6235230c829af24ccfe773c9f67fecf42c94d919110eddbfd3d13a5b1890ca0c6be3818a391be3584b805433bdf050cc49b3a276039f4e3d12f42fd721b33bbe99d3d24ddeff0dc057a9257dc948703901b18ca81651685f8d8d7c73ba794f196fe391275bebf7f888185868633cab61d7b88ad8dae21f72b8d95f7344faec81cfd636214ce48046d67f5f435781735e3df69ecd0ba62639bcb75a2f72067e5cb3c76b40f4e8e36610454c67ba148cff6aaa9397c061b41c8f48cc372e4dabab7a94fb7c77f5ff9665edd37ebfd763917251dbce6b95fcaba8de1aae402e54022c4750d41bc1b7abadf87871c14091f49d6c46a6c8a20be45e4aee27a466e3b487840481aa7e7e75c1bed0c70a15e91ddfd61b4ff43f8e84371569eee5931a67fb2549390ca2baf9417776f20b45995cace4fac1337f8aa179effec2d23bcf73a69fa0b2c507d0458ba3bd191be069ccfb225f8bc8e4446f05fe7dbd7e2a970f8b9a5ed74127c232b0de0e18a4b36ec6341be2618d15a8f2343858eff3af6ccd86792c7e9ef3d753a95ddc4b89726451c81510b6ae680225da89341ff6c39d75085742151beda7b4fadaf1d76653594d993a299d1d00a7583893c844916d84846a599f8651548a3328ddcb206408dfd2c8a65bb7a96a0bf220f09be328d89d89ad2745a1cd8d0079ec123067b04129836324610e3d77eb029b5744237b6228cc7041fc76ff576092f4c755454468bc2e01288758748bab319359c54becef029c1e2ce54664cadc0bd9437bbed45f68e408b918391f7cf2d8d5174274762a278f642dad29ef24912fd1340f2f2b21254d15d469b636f944b3484e91bb12e77ccb011e2ee126bb31145778c8733c6b1ec3a465b470e51fe69503ea3a27a86fc0daaab5a51b7c706df372886c15e0437bb58129f02f1ded30ea48d935fefec430fe259b62efb6bc285acfff07fe6867fc9f2794005866844c3441764dac51b66dc9302b61848814f82f7090fc2b813dce5b3cf532796871c7420c8851101b5089afa9ffc7a79b29b0e1728033f2649c36db7f4bf45048f3c6bd304741a26e2f9edc4bcf6456f721defb47e8bffe370861927603d8bdd7b474f0dbc0fe8493f01437c3fca4fe4d7422101f67d88523508174edf9fa51db617684eaf4f2bbed2962952b588e34fad6279fd14d8803b5071ec5fcaad476cbfa08ef79bf5bb3950ed6add11a561435b56f067118169cd1fb045ca21d6e2320b440682ac167ad0757d21ae8ed9ec0129f19270c7add456d42cb6dbea476d99b0712e7e3714b3e51b0b6215522dbb537ed32bb8d05f351de68912b2185272bd3fb2b2e584cbc8528ff778839856b427f28b6fd13508ff25fbf7ca1e4138def9a30062c67c980efdaed0a55d56974d06d40c570a0e9d3da827fa252c4bab6760f9e4f8b6ba69f2ab602123f32c161103defa7c197221ea8f5c77c3816746c81569e79168f0f2d506bbc8ccceb158a2a1161e79ccea6e1628c73c3dddd1eb34e6859664201ba4a015ec0d92e9b329bc8dedcda62971a5ca3fd16adc5ba8d66ccace5d9c3f715710465ddd38e06f921d4cd2c8dfdb7cf05a01c523dd7d55972cba0e1e7025f3764038bd39822888763d3eefdc01aaca57f3c0d703bdad40127bd3c0478ef3e4fef536f94d1309a6ccd65fd2c36e31bf2a0766077fdccf6bed812af7ca17a0a1fc105385b34934a50664de6040f83a720c0f9f047c21bededf6506166bdbae84e783861209a26578a2e0960082378b5d3df603255a38c7ec59891be9d2a0d4ad6e7d29fb27ec7ee27a96c3237f91e8a72a40791b2a139d33219c7948a24e937e5ce705e6390ad6378f8f4954eceeaa78b3baf8d3a18c9c11d8ff29cd9a4f3251fb7fdb216226cdca5c54f77193ad8c334adae9d959c587a8f83e3bba4990aa9d8bdcad29cf2f8941ee35eed8be120acb714a90cc66f4a92dfb6f888411d68beb5539890308900d47a58c03fc2f1066938bd87530d48851c83d93f346481ab0e9f606c65700567326235219464a4493dc753a45b8e59cedb6fe29960061cafa377a636853624cee64dd20ec71e82129320bb93013cb7d6b0b8748702266d39440ecec750c361ab098bae08f07a8dca35c593e57a2d8d58cbce64c91172ef07ea01123010e977f9ae5a7bd07ff059b8133d27c53b31de9f4c16527c675e66516a47f7cc07083bdbbf3f7599f04b87373ac7d82d30db0575c0f16892259c7b35b3277a159c988fed3235eefd33614a45dcf8fa397d5568e726921cd4eec7a5a67f625f63b0b0d4ce19dba0c0d36365312cc881b3924fd4096d01a039fc66a27030d9087f6699925b601c0ac85a6fdeeb0fa018df0c540d671f88c8c119a605f3c0b3391b482c3be3b8b74bb71b0ec719c66a425e821235c0f4992ee2076d289c5faecbb9812f1c60c7fc43b0c5ee04d37fa817c288c20ef928581872efae21e24af7244767995f405e138c6284c34119dec34adc378c9d35ac3049eb0d6869cc1a241903794c5d28c5983461f648560af98b7772a80db56eb7876c2b4c206b64d7d5425f216fc428f0b36338", 0x1000}, {&(0x7f00000009c0)="0d722b40e813ca2328c9b58fd6ffae066f85b2ff3a4eca025c00eefbc89b491531099387ad6b40250db3cbc7ac9a5e6f941bc3cb99ebfb1c570ed0ff4f0ce7e52f18236af01652eaa80133a2344af74d9d17fa39e01623fc388265f63687cb5149fc6b8896b97e625479f00fa7a1ff63030ac69dcaf52fc0ea0de4d740da547fc8286e61d7b0e484b5733b9b075cb51971f1833515fa750bcaded7f71b6ee88ed4547358d880f179ae3f7ef5cbf2e257c289d241a8f312c3e27480195835e1b58a1a077e7754af1f7bc33752c0c7066e4fb93f30af4c3df3d097e251de50b2b2a693", 0xe2}], 0x7, &(0x7f0000000bc0)=[@cred={0x20, 0x1, 0x2, r11, r5, r6}, @cred={0x20, 0x1, 0x2, r12, r5, r6}, @cred={0x20, 0x1, 0x2, r13, r5, r6}], 0x60, 0x8000}, {&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="ca9b696d604c67ae7339507710ef71f8522da9e776cd9380d22f8764ef2869bb1b98bc29eaf81bd2030005707681252e496c958a67ed4208eb443ffc05ff1a205e16e77d29b9c50780fafe2b87d2128785b29e9113fc6e6bc1e645397337c764ce7f78cb7f10f4811059bead5cf2be71134cdaca4a46503bd0ce6763a1b24dfd007ae26a3c4133fe3ad4763d5323c7a39092d7330fee6ece8e1f34bafb9db3c282fde869c5c5594b784f11555f2649a4ad34e135da58f7846ce777a29a624abfb7c604f4d4fd85e36bb17e", 0xcb}, {&(0x7f0000000dc0)="d0ddfc19a3886dc7c028a0078eea661d2a1d49aa225dfe63cce8bb5a935f4f1d11c6c503e86660c6af549195498aaa8e6ca64c52f15ad45ae9680959ee5814a2ab768ff28b1dd199cdde9080ab7bb7f8033b1c7af65f774dcc418641b439632a7633be7899ab24b29464e8340a98f824ed6554571f60511488a078806003c89feb153cb625b87c78c6adecaf12219577e964712db4d133484666b85ffe4072534dea600601dec2b698bfd359552a36f3ac3dd467c5cad9f1e8509ed4d92e006ca87cbdeb87c7427c1c877d03fce49f2ad4ab28460613cf174a23e8", 0xdb}, {&(0x7f0000000ec0)="f0109829cd4ddcbf61e13341d94da484ae37a63a1d5c74602aa64adadc2f704ae443565d829a3a850d2c326798f5cb8575202f7ffc78dddadb2e8ec797f0c1cd1a166a68111a4204afdcb37f9b62ed0127c4aee5e0fe9b9098f62ec24c8b17e94ca7383883e80e7bf009a4b89b07de82c1583f84bc04d4ef5836f9bb8eb69ced6e48a478b1492f6e1df79e5abac177ced1dd9252568ca4fd6430ee1eb4e767255c90bbd19f27bf4efc99b27cb7fc52a28dcf6ab5b1a62486", 0xb8}], 0x3, 0x0, 0x0, 0xc0}, {&(0x7f0000000fc0)=@file={0x8791df3b4e63e325, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001040)="9540c3ed69dc0f69831c30ebd7dd899cc0d8caccac5b22f6", 0x18}, {&(0x7f0000001080)="2db71cfad494ded1de2e1b8c0793a568b18008839c817b2e83b7b2b2595ec6d71a0f3d830c0a2d3984efb77467a845185cd05663439b98fa00776da9ba87f827bea67be11ba8439211fc314056d7640576c6402b6d3b0e331fa93cc4c012d4acecc84afc1de6ccabbc6bcdd8ec66fa8407ca08272ccfacb84d2871685c19c23375e88f7b9ba9c42eb24c9666f0ff87dce37876ec0f6a19fe885d91363b9d5f8d41b6185f9ac31da0030b9966ee23d3a62dd2eae05ab44e21c7ebe3a457563ef305c3138580b3fe7211b4c9370723908294a8e601bbd5a55466453946f9a83cc4f51fd2c2b7b992b8de1b15428cb6897a8c", 0xf1}], 0x2, 0x0, 0x0, 0x40}], 0x4, 0x4000000) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r14 = dup2(r8, r8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r14, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r8, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000004820000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x0) [ 1538.243926] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x0) [ 1538.335451] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000fff20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x0) [ 1538.597530] EXT4-fs (loop3): #blocks per group too big: 251666432 19:10:13 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xbc1, 0x300) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x60) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1538.637801] EXT4-fs (loop3): #blocks per group too big: 251666432 19:10:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x0) 19:10:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200009e920000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:13 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x1ff, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x8, 0x820, 0x1, 0x6, 0x8000, 0xffffffffffff3957, 0x1ff, 0xa66, 0x4, 0x3, 0x3cc, 0xdc0, 0x8, 0x8, 0x7, 0x1, 0x8, 0x1, 0x0, 0x7ee, 0x1000, 0x7fffffff, 0x400, 0x8, 0x17, 0x10, 0x40, 0x3f, 0x9, 0x40, 0x6, 0x0, 0xf0bb, 0x4, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x5, 0x5, 0x7, 0x8000, 0xaa}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x6) ioctl$FICLONE(r1, 0x40049409, r0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xffffffff80000000, 0x2, 0x1, 0x0, 0x0, [{r2, 0x0, 0x6}]}) 19:10:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfffffffe}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:13 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efb5b68a50d6ef862754f62d9982fbcf061d692c53d55c5c27c75b5268b5704c949dc4fba017238712980b6256a43c6b086eacd73da2d56ea9"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 19:10:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0) [ 1539.019292] EXT4-fs (loop3): #blocks per group too big: 151003136 [ 1539.096865] EXT4-fs (loop3): #blocks per group too big: 151003136 19:10:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:13 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:13 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x0) 19:10:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020004c0020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:13 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb902771ec000000000000b68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1539.466316] EXT4-fs (loop3): #blocks per group too big: 1275076608 19:10:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x0) [ 1539.547775] EXT4-fs (loop3): #blocks per group too big: 1275076608 19:10:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000600020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:14 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet(0x2, 0x4000800000000005, 0x1000000000000080) r2 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x4, 0xc0000) sendmmsg$nfc_llcp(r2, &(0x7f0000002d00)=[{&(0x7f0000000380)={0x27, 0x1, 0x2, 0x7, 0x9, 0x3, "50421f574920f45ad911e712240edb91d6c4373bc5d52428006c3bf737568c1a78fb3eddadd56cdb3f88c76ef28fe397d220e0ac1206969535255c6ee0f450", 0x19}, 0x60, &(0x7f0000002780)=[{&(0x7f0000000400)="262e89ec1a23ca06526d11a4755705dd3dfa1b2b229dcbf2f6cba9c5f3b37f37a1d87250fd73edd0c67ff0e62e69453bffc4e5bbb0cd152f7586308dccc4dcfe1c393d28e71158abbb902ef17bee687a335e6c0cfe153d0a0ed142f865cbf133344096356cf318c00427f218dc8aabb1b3a21b36022f43e7d30237d9ea37a5320e9c0ac7bf2d188c300908e84c6238751ca6a6de298a280623e12fe6738f700a64ebdefc10eac92e28e57d0cabcf136109643e8851f5a0496cbfaf6ed0e58ec6ea670f84dd1eb71a1e93e1da7c96cdcbc4ab07328eb5238eba015610d48976716ccf2013177a", 0xe6}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="aecc248b094a425eeb7c234409abc76b4af554623518b2ee0f8e52a8fd08d790ca3792b7b94a64a2112197253be326cc725e792ad8488bb3c7c33d74c951b150135fd024b0c9e984fe2a8579a0461886bbf9e77cfadb89c6b68f7bc4f48c0ba5a56d73ba2b", 0x65}, {&(0x7f0000001600)="1ce20a2723c3728545eff611b061888469e940dca00c589e647776cac4c724a144babb2590216c9db73783a7d554873855e04c381edc6e92c509263b245f3c1b6ddf3aa8c9942f2edc7f57cc27ce2045a744e670e8308a4ee1be7b9db99612c5de4f432927d1d588a96ded492c4a78572453bbc2e136dd5b4116a9", 0x7b}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="4072507f24b35c5ea297108ca8d8692a6e6461462c7ffa1d4a9d378d2ca626b4b96f786b6de604724342194b18b5e99c08807f163c20038d97fd3ba9eeb4e3b5bd12aaf699f53b425548f291b6b1bd2e525b4ce6cbea962c6aada919c92eb592248f7a27d6ce10fe82bfd8192b25363fc145c81feeb16c05707a04523f50a791131f8998d84e8011c4a70c5151e586ad087784441f7a68e2e6add560da0ec24fb754b5db3f80ab4f5b9d86d190deac9fe259f896102aa2052352bf97302e282893c0b6615d050f7f736a1624c981158fd2e3b6c9862a3914db40183fd7ea994399e1b7b6786829f917769583df3bba5b", 0xf0}, {&(0x7f0000001580)}], 0x7, &(0x7f0000002800)={0xf8, 0x10b, 0x2, "aca18edfd4c8b1430a21d09507a7df30ef7f71ab2a6b1545c924d45bfec3f26347d31506e48b7d90ce3bcdfe34922b759fba5d33996a5935752bd4a3defbde8c51cc2f3d60255e9aa7b595af43bfe68e0cfe74a561bc7afe7d5c8e2a90492d11b418211f15c9d423e78af6eb2687005ec8efb0b51b1d2ce4b79a3b98342eeaaa55299b19bdc6e5ca05855e161a6bc7ee358381e63cc0dbfc4c4d26398ddaaffdf32a599647709c790d66b3e181e562a1942a2f5f04cbcc52a22c09c3cbd82f377ad31bee727db099d5b0fe70e19dddb14ec3350b10eda94e1bb40650361942d721463c0bd60de672"}, 0xf8, 0x1}, {&(0x7f0000002900)={0x27, 0x0, 0x2, 0x7, 0xffff, 0x7, "f391bb3c70e47a85b586874c2201f0af542d3f0dd6901d6e26a8dfcdb9f0c40583b979740156c285b0c4c5fdf448a2fae48dc4e4249afe0598ae0eb7db5ede", 0xb}, 0x60, &(0x7f0000002ac0)=[{&(0x7f0000002980)="b9d4416715ae1d657e4c71c424866fd65c1ff39fb73822973c227d82664148cf4132272d79522e2612815f292189033157fadc54e34de4d4475ea91a30f9e7e9589d829ac00920aba3f2962cdcd5b6163ea19518cb438b6d2c4685a57c125a32a578145dfb4b141734b8baaa86db9add5025ebe1dcf7fd66773b19e40d602e1c9f452a02c220ed844361e3bea3e83c2960e05b12a187ffc88529bec14ff6884e541ce6bab1bc07a4d55fe8c59cdbad78e101a8cb5841e95348333dd17470a025b912cb503542071cb94efd2745d88ac406fb", 0xd2}, {&(0x7f0000002a80)="b93069bd12f08c59a39860bcba0ed12f9bef1dfd1256b80d3aeddabedd7489cb81359ee8f1", 0x25}], 0x2, &(0x7f0000002b00)={0xf0, 0x10f, 0x1, "3eccc5aef97ac5127eaae3f38a69480ef4de0de4eff89b2f39cb39fb317bf262aa9c6a6a5129610ee4d1160a0e315cc0a5c8cde16fb5f8947abf785c2b9dbb4fc1da35a0769b0a408e938e9eed4cc659a6972ca91798f7e956d43472cdcc2562f85540864d659a6f513542bc9b643ae5fba9dc07e56ed6c7b3bf51778bbd200fc7a2538f1255d6aaf32b34a1fe5c456e8a0e2208c5481f7f7fe488778719e8ed5185f3f2debf0531ec6f96b508fe67a0135d9ccf05beed90682e50a4eac573a3887963276322b04e240a76d5b783aced12f355dfef5a0d15ef"}, 0xf0, 0x4090}, {&(0x7f0000002c00)={0x27, 0x0, 0x0, 0x3, 0x10001, 0x5, "82c1ce10bef6aa49e9f35d4213cccf87021eddf54ac704322f168b5af863221e1abb80150956e2aa07b5213ff7e66315de6ba8ebe7bea89714fe57d357a432", 0xc}, 0x60, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="897ba068ce45d091c0687118604d62e0556274760c15791bdbbc7e582d3154666c845e848f916303d0ccdcb7207774e4c9de8d1322bb5e66", 0x38}], 0x1, 0x0, 0x0, 0x801}], 0x3, 0x40000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0xfffffffffffffd7b) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup3(r0, r1, 0x80000) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="0f2b43ffc401fd28711bb9800000c00f3235010000000f30430f01cbb805000000b9002000000f01c1470f01cb0f3accb25f500000f7c4a39948dbf8420f23c8470f2240", 0x44}], 0x1, 0x8, &(0x7f0000000240)=[@dstype3={0x7, 0xe}], 0x1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000002c0)=0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x100000000, 0x8, 0x0, 0x6, 0x0, 0x5, 0x0, 0x5, 0x7ff, 0x1, 0x1, 0x4, 0x9, 0x100, 0x2, 0x9, 0x4, 0x9, 0x3, 0x4, 0xb6, 0x3f, 0x10001, 0x97c, 0x24000000, 0xfffffffffffeffff, 0x4, 0x7, 0x80, 0x5, 0x8, 0x0, 0x0, 0x6, 0x1, 0xf0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x100, 0x4, 0x5, 0x1, 0x2e4fda07, 0x0, 0x9}, r5, 0x9, r1, 0x1) [ 1539.680154] EXT4-fs (loop3): #blocks per group too big: 1610620928 19:10:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x0) [ 1539.723731] EXT4-fs (loop3): #blocks per group too big: 1610620928 19:10:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000020020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfdfdffff00000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:14 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd7000ffdbdf25050000000c000300020000000020000000000000000c000300090000000000000008000100000000000c00040008000000000000000c00030059010000000004000900000000000000"], 0x64}, 0x1, 0x0, 0x0, 0xbc29e7b183f7d61a}, 0x40041) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000240)={0x6, 0x4772}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1539.964407] EXT4-fs (loop3): #blocks per group too big: 33562624 19:10:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xc900]}, 0x0) [ 1540.050290] EXT4-fs (loop3): #blocks per group too big: 33562624 19:10:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000480020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1540.257332] EXT4-fs (loop3): #blocks per group too big: 1207967744 [ 1540.305095] EXT4-fs (loop3): #blocks per group too big: 1207967744 19:10:14 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x7, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ffffffffffe, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1010c0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x7f, @multicast2, 0x4e20, 0x3, 'rr\x00', 0x21, 0x114, 0x22}, {@broadcast, 0x4e24, 0x2, 0x9, 0x386, 0x595}}, 0x44) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x200007ee, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:14 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) socket$inet(0x2, 0x2, 0x3) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d690e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x0) 19:10:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000006c20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:14 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x800) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x2f0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1540.526208] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0) [ 1540.642674] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000e8220000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:15 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x42}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r1, 0x10000000}, 0x8) 19:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x0) 19:10:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfeffffff00000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1540.842193] EXT4-fs (loop3): #blocks per group too big: 234889216 19:10:15 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) userfaultfd(0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1540.919937] EXT4-fs (loop3): #blocks per group too big: 234889216 19:10:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000007a20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x0) [ 1541.068252] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:15 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1541.161764] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0) 19:10:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000720000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:15 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000fffffffe000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:15 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:15 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x0, 0x1, 0x8, 0x0, 0xa0a0000000000000, 0xffffffffffffb2fd, 0x7, r1}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r3 = msgget(0x2, 0x1) msgctl$IPC_RMID(r3, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x201, 0x6, 0x4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0xfffffffffffffffa}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={r5, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e5361833e5f"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1541.493811] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x0) [ 1541.560761] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:16 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000054}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000fd6b1334d07f2e1d0b815da83491f2d5252e0dac2c7e00da386645f54abbf6eb94bc9105a93b5dd09e2db3261af5744f4169f59ce2a0fe0b399514985cf2cd856f90f36d8fb97e27a11814ca31e1400f7526f67b10ba153b4a9458a1a9f35f416118785aaf66d4ea38b9f3370389419f2136bfba6cb1ffcf2570d160f559b273b66dbd7ad5ec2e1e1cc7afcc4523f29bd082c98a4f852cd7b1ecc002a6b0af605ec5d25c8d", @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf25010000000c00040076100000000000000c0002000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001200), &(0x7f0000001240)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000100420000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x0) 19:10:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xbf00000000000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1541.792212] EXT4-fs (loop3): #blocks per group too big: 268443648 19:10:16 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x72, 0x10001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000180)=""/219) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x21}, @local}, 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff00000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe78}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x675a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 1541.871315] EXT4-fs (loop3): #blocks per group too big: 268443648 19:10:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000201020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x0) [ 1542.040451] EXT4-fs (loop3): #blocks per group too big: 536879104 [ 1542.077889] EXT4-fs (loop3): #blocks per group too big: 536879104 19:10:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020007a0020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:16 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)="766574683100000000ffffffffffef00", 0xffffffffffffff9c}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)="0f75a9af2602fe28d8fa234f99c777a6def828eafb48998d8c4a77603ace7f5c8b798a9c19b59c8a156d8da182f10d35c89add3269d178d4eb705e58116d6eae6a06ee2d942f7f92901bdfcdb5f9941d1b984a43b9c0da8b593e2582cba3eaba0929a9ebf88f0287fa882b514ff95b5cb2a02528335d6cd7629e5777bf0fc5f879e6b477aea0b2d473aa04cd04614e386cb42941e97e83f105465a2752799bbbfdc6ad0ddb234c303957fa69e052dc2bbea39a202fb43289bf63292f66f24206ba1d3f5ad4b4835732ffe49f1376bddb292c28953ab27d99bdef03b2f188a9c4345fe86fd22ab1af0d18b586529b30d14856c3", &(0x7f00000000c0)="349ccab52633bfa05c29c67f29410d664d45d183db34ee7b17c03833674580a9cb88785d26fa018587794c8fa78949c11bf61b567622ebb13576063827a638938fe67316716286c10d4f3ac1c43b11f1f05a850d8b95bf0aafc4a165a67c7839abb234814cd74828dde9dcf160eae388ddc88729f187ee0be794d9b797afc33e", 0x3}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1542.199814] EXT4-fs (loop3): #blocks per group too big: 2046828544 [ 1542.218723] EXT4-fs (loop3): #blocks per group too big: 2046828544 19:10:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146371]}, 0x0) 19:10:17 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:17 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={r1, 0xff, 0x10000}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000280)) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, [0xffff, 0x5, 0x100000001, 0xdb]}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r3, r3) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000300)=""/221) 19:10:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000e8120000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:17 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) [ 1542.604160] EXT4-fs (loop3): #blocks per group too big: 234889216 19:10:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x0) [ 1542.686882] EXT4-fs (loop3): #blocks per group too big: 234889216 19:10:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000001f20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfdfdffff}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x0) [ 1542.907095] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1542.964166] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000002d20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:17 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, 0x8) 19:10:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbff0000]}, 0x0) [ 1543.151350] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1543.221227] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000003f20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x0) [ 1543.432855] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:18 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) mlockall(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r1, 0x0) get_robust_list(0x0, &(0x7f0000002600)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f00000025c0)}, 0x0, &(0x7f0000000240)={&(0x7f0000002580)}}, &(0x7f0000000300)=0x41) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) dup2(r2, r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:18 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x0) 19:10:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000004820000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:18 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r3 = dup2(r1, r0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x20, 0x3, 0x4}}, 0x14) 19:10:18 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000820000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe00}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1543.895603] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1543.948415] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000ce20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x0) 19:10:18 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x100) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x15, 0x7, 0x3, {{0x8, '(-eth0^@'}, 0x1}}, 0x15) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x505080, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10201, 0x0, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100), 0x8) [ 1544.091289] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x0) [ 1544.197811] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000a20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:18 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)="766574683100000000ffffffffffef00"}, 0x10) ioctl$VT_WAITACTIVE(r0, 0x5607) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000)=0xffffffffffffffc1, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1544.399232] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc900000000000000]}, 0x0) [ 1544.448635] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x0) 19:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000002d20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1544.816331] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1544.857539] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400e"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:19 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7605, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'teql0\x00', @broadcast}) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) r2 = socket$inet(0x2, 0x800, 0xffffffffffffffe0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000280)=""/132) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x1b9, 0x0, 0xffffffffffff0000, 0x3, 0x3, 0x3, 0xfc, 0x40, 0x99, 0x8001, 0x6, 0x38, 0x1, 0xff, 0xfffffffffffffc98, 0x4}, [{0x4, 0x100, 0x7fff, 0x101, 0x4, 0xfffffffffffffff7, 0x200, 0x400}], "5f584bea954e5dc38a81810355b2f517d9490f2db2f45282ded55ca568cd7fac", [[], [], [], [], [], [], []]}, 0x798) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xbf}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, 0x0) 19:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000007a20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:19 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1545.027952] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:19 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$sock_ifreq(r0, 0xb0f01aa48e3c2441, &(0x7f0000000000)={'teql0\x00', @ifru_names='ip6gre0\x00'}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000220000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:19 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x80, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x105000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002abd7000fcdbdf2511de0ae64efa29904692cc000000080006007e1c00000800060008000000080004007f000000080006006d030000140002000800040002000008000400000000"], 0x50}}, 0x800) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x0) [ 1545.232528] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:19 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x5, 0x988}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0xfff}, &(0x7f00000002c0)=0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sysfs$2(0x2, 0x5, &(0x7f0000000180)=""/166) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x24) write$FUSE_WRITE(r3, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x1}}, 0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1545.322888] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000025000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:19 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24}}, [0xfffffffffffffe00, 0x80000000, 0xfff, 0x1000000000, 0x400, 0x6, 0x80000000, 0x0, 0x3, 0x7fff, 0xbaf, 0x7ff, 0x1ff, 0x5f, 0x1ff]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x8}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)="76657468315f746f5f626f6e64000010", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x0) [ 1545.529710] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1545.586845] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000007420000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:20 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x100, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000002c0)) r2 = accept(r0, &(0x7f0000000000)=@llc, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0xa00, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x2c}}, 0x90) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) 19:10:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffe]}, 0x0) 19:10:20 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)="766574683100000000ffffffffffef00", 0x4) r2 = dup2(r1, r1) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180), &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) ioctl$int_in(r0, 0x805452, &(0x7f0000000100)=0xff) 19:10:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fd"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xffffffff00000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1545.962961] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1546.050608] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:20 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x0) 19:10:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000520000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:20 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = memfd_create(&(0x7f00000000c0)="766574683100000000ffffffffffef00", 0x1) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt(r2, 0x8e, 0x5, &(0x7f0000000280)="9b92454ae1c9651679cdb730189ff6ec252cd7d4d627fbb342d6c893886969d838ed", 0x22) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:20 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4800, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) 19:10:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x0) [ 1546.382522] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1546.421502] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:20 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0xfffffffffffffe8a) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@rc, &(0x7f00000000c0)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xc45, 0x5fa980d5, 0x6, 0x4, 0x6, 0x5b0c565a, 0x5c0, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7}}, 0x7, 0x4, 0x1, 0x5, 0x4}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x4}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) 19:10:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000820000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x0) [ 1546.609338] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1546.679949] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000060000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe00000000000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x0) [ 1546.888174] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:21 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xcd, 0x40) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b95cc97b19a5eb9033d0c5bc8a05cb64c99a94a54d7bebc66228c1885b862754f62d9982fbcf061d695300000000000000"], 0x1}}, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000180)=0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x4e21, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) [ 1546.955452] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x0) 19:10:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002f000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:21 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) set_thread_area(&(0x7f00000000c0)={0x0, 0x20000800, 0x0, 0x7fff, 0x8000, 0x1, 0x9, 0x4, 0xfffffffffffffffc, 0x2}) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:21 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9000000]}, 0x0) [ 1547.499917] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:22 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x40) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1547.554691] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000420000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xbf000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1547.760074] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:22 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x44) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x0) [ 1547.821191] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000006020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1547.995882] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x0) [ 1548.036286] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:22 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1b27, 0x8000) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5bbd) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="2f2935c15f9edca00afd7d2067813cd091d4aa82da26920d0323a06173591229bfc2c6cd0b26de35011766b9cd6dc0c0cb8166a1b58e7e7686f1f33c27785ace9f4df100f85f", 0x46}, {&(0x7f0000000200)="8b051ff9b0264dc8fe4f03a2711fa0a4c31167b327ecbce2e92ffc7802b68dc9e5b0af4c490d7967a6b07bda5b621dd573feb39cd0384f44a13d1f6ab9f8ffc956f7475a99c9241c7140b3b6a05368a97d66105543e44b0d2c5df10ccb49a6cd08f1491b3ba46ce23af16adc9193ddc06f237e1e25c50f6c00d529f3d7105412e698852c9b755ef2d1891d31b9ecfadced5a58f2afe367ce6fbf06dce96cdf2d8cfef33b8ba1dbff22e92fe148fcb870d7be9c4c6b14f1969d5ca6c04a206038a82a9188029eb3833efee9f550a27fa5bccc7c88895d116ac1c302", 0xdb}, {&(0x7f0000000300)="b525", 0x2}, {&(0x7f0000000340)="c636177aaefdb8fb8d92f6323e4c08faba1ae080458bc3a4b0171963992ffe3848a5af1fb3b57e9989cf79cbb9a5c39be1b51f973656e949373948a1e519ac58c48c2a04253794637081a93c4b66ee8776107f3e29e80499a808f0dc7bca5c243e4966029d0257ab7594ee138929d370ee2171bd38dc449e", 0x78}, {&(0x7f00000003c0)="2516ea14b571277dcb406baaf61a3cd12f56d301403878be793396769f9e88cf647ab5f96fe9979ba4d75eb74fd6bfd731aec528e9c721c32446929e7aab9bd2414a648899ae7f2e8636d672dcb5a819e5fe2276934f6e58ec51c808d8ced7c417f3052200ee0fa92f3b80cd3f27bd1eae3cd187d3b62f39260797ff758b77d3dbe9b2885746cd98c1eea0d0f1", 0x8d}, {&(0x7f0000000480)="9d12893b7ecea25c588f8b0c95d00de783674c7456c1387ebe54c9d530392de21758202bbde2b4ebde48e977de37667084c836c52a1d1d85b16ce1d9c370ca474bc5857b1fb2d6b6eac7eb04a08a4eb6ab53b220bcf436d14bbf8f8aba27277e76ce6f06839d981806508e03500b4d93c99f8f49cc20146f3abc87e0e6100a1e31e92751c7dc5ee360b46f6822f8d0ca9b1407834d8946f2261fe31151fa00a6a4d77968964021e6e046157d2109cebfa087a60d83839046e0958746541afe037cbfb074dedd93ca3cb293c87f", 0xcd}, {&(0x7f0000000580)="e6edef6b92cef4db3a274332e46a62b5858717844126b31f152f11a9c11637113195d457b36e2b8e2bf891b5302f7771b0c8430a7b072a356631aea7acdbc480fa29117d7609707d5b7a79bbeede", 0x4e}], 0x7, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x10}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000ffef000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:22 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) r3 = shmget$private(0x0, 0x1000, 0xc04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000280)=""/166) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) read$FUSE(r4, &(0x7f0000001600), 0x1000) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca00]}, 0x0) [ 1548.361073] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1548.417291] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:23 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000002320000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x0) 19:10:23 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x210600, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto(r0, &(0x7f0000000180)="72806ce12ffd4256ca5164e87fe692328080f4f85cacdad7d4b716d682343bd2418a18a6cca84e284cb7cbbbce278d2085184d6f622b2a823faca691a5d1181f59ac034b958016540763089749d3d8a3a20c1501038ef95e09841b0f247dba59ebdc226e339da6dfa62383e29ec1f2b6f8e149ca5b16fca5f44e7fbdd92631d3a8241966d465e6055b5e0ba85d8ae2bb782da5baee30a40a8d", 0x99, 0x880, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0xf25) [ 1548.710956] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1548.788740] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000006820000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x0) 19:10:23 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet(0x2, 0x80801, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x42002) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x6}}, 0x18) 19:10:23 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1549.007222] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1549.061321] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000620000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1549.241329] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1549.287317] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x0) 19:10:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x8340) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000002, 0x354800000000000) accept$packet(r0, 0x0, &(0x7f00000002c0)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000200)={0x7, 0x3fa1, 0x9d, 0x5}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x10000}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000240)={0x1000, 0x6, 0xb1, 0x8e, 0xfffffffffffffffb, 0x3ff, 0x200}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000000300)="50412fc7f5cf1965e9854a0a6a844747879fdc38d9a54b75378340c377f663476b7b02b462d386a0860a0bfd3e6fdaaada2e1bdea84f45bc74fc9657e8462cc7dfd5b1e66cf008773ac4e087f6c3684239730f52589731e3033faa76bdbbc0afd8b6df8fe7f526a3c1cef049a7f1535c4ee92424bf9b15453c379ac36f19c2b26f9e48c8ad364dd24748f66db242853ecde4be622f88594b7e01e736fd9bd0bf8135bece83e9e44bd16f3517abd01ac189e7deaa884a95859e2d3dff2f"}, 0x10) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x1, r2, 0x18, r0}, 0x10) 19:10:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000920000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:24 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:24 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x84000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000280)=""/248) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1549.697490] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfffffdfd}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x0) 19:10:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4400c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x6, 0x2, 'client1\x00', 0x1, "61bb516743b1d98a", "82deeea96d1461319f8c009587a769a72c69c4f5caa24e53efbd201f5ecfbf91", 0x100000001, 0xfff}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x8) 19:10:24 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000280)="f3425f128d66228461097b4b94209d7c410b9f562de3d1dc8ae21f2b6c9457fd2a28bdc968dd98c77659431598ce1c7ead90b3478019acb016ac6c768b64fdbc9ea460124da68325a1ddede856863223482bd9d591048e3effb38f6f52b7781c2240afc8d2f890ea5f5f7a67f7c2a82dc8fa10450605ce21da8bc67a22c6c754a2ec76dd93d226fbc83c0000", 0xffffffffffffff8e, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1549.783961] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000000a000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x0) [ 1549.973540] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3ff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0xfffffffffffffffa}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000001420000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1550.032361] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, 0x0) [ 1550.165256] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1550.222470] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:25 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setrlimit(0xd, &(0x7f0000000100)={0x1be4, 0x80000001}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8001, 0x20000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x1, 0x81, &(0x7f0000000180)="87ee1926546b2d9a240924b0616e73b512fc6507a26e7fb871b0a9902a9ce713b41ed3be4b2a420b9964becaf7d2c158183ab3bdc25210d3f8e8d3505404021edd55b083f3e722420bab83278cc89f9e12ed09c7a1e721327be86c047d50ffadd8059c39bbf43589edeacd411e070bbb013bb71e448988671f24bfd2f2b19b808c"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca]}, 0x0) 19:10:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:25 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$binfmt_aout(r0, &(0x7f00000008c0)={{0x107, 0x0, 0x0, 0xd1, 0x2a8, 0x8, 0x63, 0x10001}, "ce563b6823fe1d31718f513752463bfc6feed5a061dcc0c9536b8680f47b3291a4130e96dc008c606d1f4c6b754b347f767b09ac8a6aee0e3134c576b793c5cca99b316d20f025318622e5ba5f8461b68adf84a2242000c1a8b7c8c842664f38b171f52553f64d616f7fec1230524ddcf304360028d4d202922b9874a90dd6ab5b7d85f3b64be11a5d125bafcc3fba8c", [[], [], [], [], []]}, 0x5b0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000320000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x0) 19:10:25 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10e00, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x26e, 0x400000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:25 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000820000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xbf00}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1550.708753] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x0) [ 1550.797254] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000720000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:25 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200040, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x0) [ 1550.987331] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1551.014312] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000005e000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:25 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x8, [0xffffffff, 0x100000001, 0xfffffffffffffffa, 0x1ff, 0x4, 0x4, 0x7f, 0x8]}, 0x14) socketpair$inet6(0xa, 0x800, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x100000001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="c1000000c0cbe1a53b34dd720bca86d40f88da86221ce000fed251504ebf34c483d6b7fb44db1434753462c6bd3448ba310b264039b15d5cd2d022be4900328f70d35896f4fb6ea8ec1e5acbba632d76c71e4b86e662c9e046e9583cafcb997f2bac2e80b951de58520e49d7e27db0212983ffde253d5b4a7b57781dd2bbdcc56cf156f25f5eae74e5f3f1bc7064c690800b035c44e4bdabbfe9b3bb1083893d10942f728656d28493f1e45d4858e7201217c9e43b51ee986d485d6a4bb843880244371cf6"], &(0x7f0000000100)=0xc9) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x200}, 0xfffffffffffffda6) [ 1551.179192] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1551.234354] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc900]}, 0x0) 19:10:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000fff0000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:25 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20004002, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt(r0, 0xec2a, 0xffffffff, &(0x7f0000001600)="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", 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9069ad7573a0ed3f54a23f73ddaa07bb3933d0c560ab00010000000000001b70efbdb68a54d1ef8627"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1551.500776] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1551.558766] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1551.580021] tpacket_rcv: packet too big, clamped from 65535 to 65392. macoff=96 19:10:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fe"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:26 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x3ffd) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xffffffeffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)=""/151, &(0x7f0000000300)=0x97) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r2, 0xc, &(0x7f0000000100)={0x6, 0x1}, &(0x7f0000000180)) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x8800, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfae9, 0x8000) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x2) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x80000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d656e69782c6e6f6465766d61702c63615168653d6d6d61702c6e6f657874656e642c63616368653d667363616368652c61636365737b3d636c69656e742c64656275673d3078303030303030303030303030303037662c005710becf62be5ebcf6a480ce78c7505f3fe331d5d7e45f0069a9a850635146c074baf46e2076b5870b9bdc434e0b86b6edf12c86a35a16e24e8819dc849e9bb5"]) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x0) 19:10:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000006c20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1551.789644] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1551.841461] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:26 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe0000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:26 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000280)="387a4f7830e965c0647bf9edf2d747df398b465497dac05217dc69949582214f75b9d48f92f209a1c6ddc9c304e76216e1b72d09d9987f90373ee7b065f367e0ece81e1dacd679dabbadd0468bb5a440ee7006e4d442f1b24ee6421e9847996bbda9538e540c052d9212e5eb9353895b3d324174406b8762489449d7d24242b2164a04351dd9458d2fc0", 0x8a, 0x40, &(0x7f0000000100)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, [], 0x18}, 0xa3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000004c20000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeef]}, 0x0) 19:10:26 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x1, 0x200000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xf91}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e20, @broadcast}}, 0xda, 0x5}, &(0x7f0000000380)=0x90) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000003c0)="17dbc3b96997b69efd73426bf52abde200d3b0c69fc578d80de50918537553cefc097222ab64bf3838977dea1470888964cb5fe79f7d7500e38b88632fe53fa4b4624f026b8ecfb5f37eb36ae66dea4c0a1e30495a847516426d73442fc4e4840b1af01c338fcac369208b2140e9c06453f9d0a7e672251c2fabaa0ee217cbc1da6ca97052be96db3700f9be8734c82a436dd8fcb7c7d928d56e489eed0b280dd0cf1118e8fe1dcd50b61ace0e8d1070c0453c4c947fed9c9e984b2f7f8755803970634dde16e1a4889fe2ccd74389f03ca09a") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @broadcast}], 0x30) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f00000000c0)="57beafe50526abffaf3fe945524099686d9f457012bcecafb610f239e17bbaccb8d226f54a8236ce550ce416ec97cf4d63b031af158cdb0ff90d14d1b66fd8ab74922ff3d3c8a8d04a00c86ff6a9a595f3849e0fe6360691e607245d3e2510c3a0f280390c076f96", 0x68) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1552.018980] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x0) 19:10:26 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8840, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1552.112298] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000f0ffffff010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x0) 19:10:26 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x41) sendto$inet(r1, &(0x7f0000000280), 0xb0, 0x200007fe, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x4, &(0x7f0000000000)=0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x121000, 0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="366d6a9936c789f077939961eccbd415dbcbf59b27767a91510342b560c488fc670d01ca9aa714d589c4d6cc3ccd7f6b33b1f24058707863cf2749e285b0db2b9dc4703c58106fedd28e9db2915a272621518760f515a9ba098eeb3e3ed2f2468f29a44a6e8a71c071d01c516ed5c57d523957f0a2676fb37f94e8667de91b0f4fc459b9c4fb33c51a944eb65429b267a3b29d5cf0c0a16f5bc827a479fbb0704fbb072afce7b02c432cf6ae60e26cf7968c716d370d", 0xb6, 0x200, 0x0, 0x3, r3}]) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000240)={0x9, 0x7, 0x9, 0x5, 'syz0\x00', 0xff}) [ 1552.439877] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1552.456706] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1552.517747] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1552.553957] Unknown ioctl -1069525735 [ 1552.567528] Unknown ioctl -1069525735 19:10:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x0) 19:10:27 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x7f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x5, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab2af6ed2720da78c21b70efbdb65739d1ef8627540100000000000000692e53d5eda1276e22f1a1399300000000000000066b0800543e7d941fef010002a06c975b5bb294ce2764b27797a4069414c8e0439044ef69a2d234b753dd"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000efffffff010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1552.838316] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1552.931130] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:27 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:27 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x6, {{0xa, 0x4e23, 0x3, @mcast1, 0x4}}}, 0x88) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x0) 19:10:27 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5ea9033d0c560ab3ff6ed27201500000070efbd1d692e53d55ca127000000000000000000000000000000"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000060000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1553.076347] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbff000000000000]}, 0x0) 19:10:27 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x408100, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7f) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xb0, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x10}, 0x600000000000}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0x1}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0xe7, 0x3, @remote, 0x9}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x8, @remote, 0x4}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x7}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1553.139258] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000005e000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:27 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xfa1, 0x10100) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r1}) r3 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50e88c635254f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000000c0)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000280)=""/148) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcc90f00]}, 0x0) [ 1553.399880] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1553.478289] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:28 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80b, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev}, 0xfffffffffffffded) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0xfc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/169, 0xa9) 19:10:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000000a000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x0) [ 1553.682334] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1553.761853] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000efff0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:30 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/4096}, &(0x7f0000001180)=0x78) 19:10:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x0) 19:10:30 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000280)={0x10000, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @local}, 0x22, 0x2, 0x4, 0x1, 0x5, &(0x7f00000000c0)='ifb0\x00', 0x300000000, 0x2, 0x400}) 19:10:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040ff"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:30 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xbf00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1555.898164] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:30 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair(0x0, 0x7, 0x3000000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x80000000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x20a, 0x2, 0x5, r3}, 0x10) r4 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x4000000000, 0x101000) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x8000) r5 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000015c0)='bcsh0\x00', 0x10) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000400)) r7 = dup2(r6, r6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) ioctl$KDDISABIO(r1, 0x4b37) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x4, @mcast2, 0x8001}, {0xa, 0x4e24, 0x3ff, @remote, 0x3}, 0xbe, [0x2, 0x100, 0x0, 0x3abe4ae4, 0x0, 0x1, 0x3, 0x4]}, 0x5c) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="09a5eb9033d0c560ab3ff6ed0008da78c27f00000000000000ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) dup2(r7, r5) sendto$inet(r6, &(0x7f0000000000), 0x0, 0x40000, &(0x7f0000000000)={0x2, 0x4e20, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x8000) [ 1555.950254] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000f0ff0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9]}, 0x0) 19:10:30 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1556.106463] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x0) 19:10:30 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)="65b85326755e04000500", 0xfffffcc2) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1556.190447] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000f0000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71631400]}, 0x0) [ 1556.408962] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x0) [ 1556.496632] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000ef000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0) 19:10:31 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b4d0d7c70efbdb68a50d1ef86020000009982fbcf061d692e53d5"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1556.714262] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1556.814588] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040ff"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:31 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000180)="a5eb439519b0684de02949d7f82f6b7eba909f7c03b9a0bc5b48f453ff64f5ff00fa7182882efe06bbb03aaeb7837d096e67ade98aedb0d46eb2a33e49cc52af89708b93459175a9dfe028bfdfcd7006d1e98664eb320de55e6d25c71ec488ab89a98b03f8768599a99bb985cd872adb7900b2b60f55c746bc9e0e58ebf453c4bce14daebde8b37fffb574a0e4", 0x8d, 0x8000, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002f000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:31 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x0) 19:10:31 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='veth1_to_bond\x00', 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1557.244943] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1557.304210] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcc90f0000000000]}, 0x0) 19:10:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000025000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1557.495864] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000026790000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x0) [ 1557.631504] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1557.631504] [ 1557.690391] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1557.690391] 19:10:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, 0x0) 19:10:32 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = gettid() r1 = open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x100) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x8, 0x8, 0xfffffffffffffff7, 0xfffffffffffffc00, 0x0, 0xfffffffffffffff7, 0x80008, 0x3, 0x5, 0x0, 0x8, 0x7b, 0x0, 0x1ff, 0x101, 0x7, 0x779, 0x0, 0x4, 0xf46b, 0x0, 0x9, 0x3, 0xff, 0x3, 0x80000001, 0xff8, 0x7ff, 0xffff, 0x7d7, 0x3, 0xe0, 0x8000, 0x3, 0x2b1, 0x7, 0x0, 0x96, 0x1, @perf_config_ext={0x8, 0x3ad}, 0x801, 0x5, 0x6, 0x7, 0x7, 0x5, 0x80000000}, r0, 0xe, r1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r1, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev}, 0x261c) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKNOD(r4, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x8c, 0x2, 0x2}}, 0x14) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x15) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@ipv4, 0x3, 0x2, 0xff, 0x4, 0x8001, 0x400, 0x7}, &(0x7f00000000c0)=0x20) write$9p(r1, &(0x7f0000000280)="953f068bb84502250c9ae8c5992f8483b11a4c261dd12c36f4c5f80dd7504dc26ee7bba86151fc064ff199d9ce7ea799a14be52a851b61f958bb2beef96485a0f9e05942227a07e442b8f21b4b11d7dfce3647d6fd0f2a8eaa67644f15ea0c182c0d362d016f05b1dcbf95bdc8762ce18fcad94fdd96ac103311ef32d29e5fdbcd0aa98e710b635140c978530b68ebafc3c6f1bcd7f97a71cc63b3e63973460e8c4ce33e3b0f756fd1fc106df3b99dc5ed37", 0xb2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000900ff0f00b3f6ac340067ab3680cf141b74047dcfe2b57a728fdf6efe135a7bf80677468705ab5e34b6fb723aa693d7878187cb7a8887b942b7457f3d936f5dc1a3f34c245e73883ef2d9e84802021f7d6e7290b39d7ac236bd8910a967a57a6f56323f0f43216faec4cade2cd79994c1f30c45165e91fbc7346fc07c44ac7ead53f1be557c49f0c48a4f13cba5647eba5c7d417afe5fb2ff434ff4f23c223d7d7d2afae68a2ef94b9e1017798e59da799ed09763404cc529b9d34dde050df55f18e61ca7fecb842ff002a13422d83a669844ac05b03a436e9fd8c99076c6e51f1e8f8d29"], 0xe) 19:10:32 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efb1d40d36baf646b154f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020764e4bdf0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1557.937868] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1557.937868] [ 1558.150914] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1558.150914] 19:10:32 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)={0xc, 0x4c, "d048ba709c1667e86ca4ac9f3143a7ba74dbec1b751f6acf16db6a359be749e135494b48277e3b6292bacc27c056bb9cdb0d30150ba2b7089bdd7861d4e4be8fc22f22ff426a345e75e9dd12"}, 0x52) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc9fc]}, 0x0) 19:10:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020007a00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1558.388605] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1558.443841] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:33 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = accept(r0, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80) getsockname$netlink(r1, &(0x7f0000000180), &(0x7f0000000300)=0xc) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:33 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x200) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x0) 19:10:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200e8100010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:33 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1558.621814] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:33 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x0) [ 1558.681935] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020fc0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1558.837880] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:33 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 1558.931593] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x0) 19:10:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000630000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1559.112956] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1559.112956] [ 1559.160261] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1559.160261] 19:10:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xbf]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:33 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto(r1, &(0x7f00000000c0)="19b1104396c01ea39eaa173c65ef50e5490ac439c2e83880fdfc9bfa21f031fbfab244cbc9d76d1a27f90459eaf67a6238", 0x31, 0x40, &(0x7f0000000280)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x100, 0x3, "32b1dc5fea3582682c0bff7f568460c62a6d8f59b5ef74f745e7ff379969fc40f6cdd523d88e1488c669404e1cf6591f2eaf0f736bcb251c819d70d869d761", 0x33}, 0x80) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000cf0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:33 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x447, 0xcc00) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x17, 0x5, 0x4236}], 0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1559.358834] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1559.358834] 19:10:34 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x6}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4800100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x902, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x20, 0x3, 0x5194, 0x0, 0x0, 0x594feac7e0e65ee1, 0xa}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'irlan0\x00'}]}, 0x3c}}, 0x80) 19:10:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x0) 19:10:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000207a0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:34 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r2, 0x4}, 0x8) 19:10:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfffffdfd}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:34 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe00004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1559.612561] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1559.663855] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x0) 19:10:34 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x3ff, 0x1, 0x2, 0x5, 0x0, 0x2, 0x4001, 0x1, 0x981, 0xffffffff7fffffff, 0x6, 0x7, 0x21, 0x7, 0x235a9b1e, 0x1000, 0x100000000, 0xd3, 0x2, 0x400, 0x0, 0x9, 0x6, 0x6, 0x1, 0xfff, 0x49, 0x7, 0xb08, 0xfffffffffffffff7, 0x1f, 0x3, 0x0, 0x200, 0x9, 0x8, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x40, 0x1, 0x4, 0x1, 0x3, 0x6, 0x7}, r2, 0xc, r0, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="19a5eb9033d0c563ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127103de9ce63e5adad13ea65ad9f5bc73442774b149518d04ab7ea56be00a35dc37f"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020140000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:34 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101100, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x800, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x600000000000000, 0xd000, 0x9a0f, 0x1, 0xb}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2b000000040000000000000000000000030000000000000003000000000000e5ecf4b00f110087aa00030000000000000000000082477e04f84559e49fabe7247bf2e8fdfb4cdbc45ffd2da0ba9942558d9b962609eb960692d2133c939ec771091a3326"], 0x2b) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1559.851257] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1559.891094] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x0) 19:10:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020090000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0) 19:10:34 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x7ff, 0x4, 0x3, 0x43c08750, 0x84, 0x1, 0x7, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x7}, 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:34 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x10000) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1560.323295] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x0) 19:10:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020201000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1560.394340] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:34 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x8, {0x600}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x509040, 0x16) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$sock_bt_hci(r3, 0xc00448f7, &(0x7f0000000180)="0224bce3679fded81d1c396fee65042f259f47fb63c621a68b8cfa706d2c7d9774bd57166e693edb930100f68fdd82ea8669a8c21421772b9e2b5408fcc5e5c74c2ab985dc0ee07292423f1b71d5724f3648bb2470f27d1c5d8559d270b4b6f6f79cea2aa593e8fa72babc788e47441c78b4d9b509abd53b16a550e90386da10f8561ced7fc78fbd82041d1d849339d16f8766e7bef56f81a382fdd6884076f78298e504ee76b98f0c190f3ccc90a9921d70f82143b0591c0e2b3b1152") setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000000000)="e15e2a40e316327e85ae3703ce6eed6e942fe0e9737f0922c11cf76e4f4b49562c2031495427932b2b3871c43ef0d6901122b8063299") setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1560.528409] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1560.595860] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffe000000000000]}, 0x0) 19:10:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020050000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\\!\'{\x00', 0xffffffffffffff9c}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), 0x4) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x101000000000}, 0x5ea813bad44acf26) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x2, 0x0, 0x1000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="066de332000094560836e90615353200"], 0x1) listen(r2, 0xfffffffffffffe14) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffb, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880), 0x336) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0xffffffffffffff20) read(0xffffffffffffffff, &(0x7f00000006c0)=""/216, 0xd8) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="53797a31e301b21fdf67e95ef1c92cd311fae0de93dc298e"], 0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote}}, 0xfffffffffffffffc, 0x100}, &(0x7f00000000c0)=0x90) 19:10:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe00000000000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:35 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) signalfd(r0, &(0x7f00000000c0)={0x7}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:35 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1561.069153] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1561.120809] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7163140000000000]}, 0x0) 19:10:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xbf000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000000f0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbff]}, 0x0) [ 1561.369101] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1561.442677] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000296c0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x14000, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x35) 19:10:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffcb]}, 0x0) [ 1561.606777] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1561.606777] 19:10:36 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6f, @loopback, 0x4e23, 0x1, 'dh\x00', 0x21, 0x0, 0x1f}, 0x2c) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1561.663074] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1561.663074] 19:10:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000026710000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca00000000000000]}, 0x0) [ 1561.798897] IPVS: set_ctl: invalid protocol: 111 127.0.0.1:20003 [ 1561.904574] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1561.904574] [ 1561.972407] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1561.972407] 19:10:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x0) 19:10:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020230000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1562.175603] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1562.252177] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x7ff, 0x5, &(0x7f0000001280)=[{&(0x7f0000000180)="5cbea328b6bcb9852e04d1c14a30f75581a035f2a5eae2f1cc0b498dac32acd11b2f89296c2fe7eebda6c957afb3e0219f1eb447f0f51e2d0c4cc073b0ce9b4ff716de3d5d8e8f90964f654d8fb3c173a6d1dfba69ba054e3b64bcf5ca13f2ef710553b7687fd9c0952c23585dd4aca11cf8e1c2289d3cf96fb21dbf8ffee6ac52d54d", 0x83, 0xfffffffffffff800}, {&(0x7f0000000240)="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", 0x1000, 0x8}, {&(0x7f0000001600)="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", 0x1000, 0x2}, {&(0x7f00000000c0)="d0377bdd673c46088b76cadaef986f2b28b81e76225ec28517eb3b8d04bd6afdabb0b47da184e6f9914844fef47fba85ab6fc4e7c19766596ddfeeee27a66e979d5732148da63334f7ce3e222ef5c303136b2a9141ed", 0x56}, {&(0x7f0000001240)="05e2d7be", 0x4, 0xdae}], 0x88024, &(0x7f0000001300)={[{@nouser_xattr='nouser_xattr'}, {@replayonly='replayonly'}]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffe0000]}, 0x0) 19:10:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020820e00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:36 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:36 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1562.506470] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x0) [ 1562.591571] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:37 executing program 0: pause() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020680000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca000000]}, 0x0) [ 1562.819796] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1562.857604] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020041000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, 0x0) [ 1562.990799] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1563.041750] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000140000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x0) [ 1563.174131] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1563.203559] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe00}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:37 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) accept$inet(r0, 0x0, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x0) 19:10:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:37 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000820000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000040000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1563.536187] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x0) [ 1563.635639] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:38 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8002) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000c2", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x2, 0x10}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x0) 19:10:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020060000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:38 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x1ff, 0x2, 0x2, 0x89a0}, 0x6) [ 1563.901870] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1563.938466] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x0) 19:10:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000267a0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:38 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xa) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x5, 0x5, 0x1}) [ 1564.077156] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1564.077156] [ 1564.131355] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1564.131355] 19:10:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000810000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1564.275906] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1564.275906] [ 1564.312577] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1564.312577] 19:10:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000030000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x0) 19:10:39 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="b32bd48b39534d8ff5918ff2468cfce59d7ca3251a456a6cf28c982fc45b475031154d50f9e73756f2230959", 0x2c, 0x4004091, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 19:10:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xe}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xbf00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1564.671222] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1564.729161] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:39 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe0000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:39 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x5, 0x9, 0x3}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0) 19:10:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000204c0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:39 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r4 = getpid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000480)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) pipe2(&(0x7f00000004c0), 0x84000) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) r6 = gettid() r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000300), &(0x7f00000003c0)=0x0, &(0x7f00000009c0)) sendmsg$netlink(r0, &(0x7f0000000a80)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000540)={0x1d4, 0x21, 0xc50a11988343835f, 0x70bd25, 0x25dfdbfb, "", [@generic="577019719cd209dc3c07ebaf1c9001ab6a2b473c955875aebd020452eb1e6f0475bce4303124b4dade363b55b46831f5dc39bff7bde85ce6ef579008f9433de1200184b8af919f489ed9ef34253e6c75129d34b49402c78c666df38692ebbcce89523459c3ef4e7b1a3a1ca8540c4746349d824ba6d586aafe3bb32f82a86316c597fb75712c946c56728a689e7dca72959ac67c966b62e1e4a107a93e8c66cd595cd5e0e74f2c52b8ef5c88eb4eff92b3d3b87335127fa46cbd4d040e2170ee1ca301694459fba10f3e8c824378708873676453", @nested={0xe8, 0x5d, [@typed={0x8, 0x6, @ipv4}, @typed={0x8, 0x7, @uid=r3}, @typed={0xc, 0x0, @u64}, @typed={0x8, 0x6d, @ipv4}, @generic="e2a96e96f558f775f478dccd11e2e0b701fe5da20cf108bdeef3c10cd7eafadb15e69acc8547face191d0d76aba4c57a48cfb1b49370d5c60cc0d625e8d91f4a54d2a1eb49c1749e644ceb0c864f603f60", @typed={0x8, 0x1e, @pid=r4}, @typed={0x14, 0x54, @ipv6=@dev={0xfe, 0x80, [], 0x18}}, @typed={0xc, 0x35, @u64=0xd1}, @typed={0x4, 0x52}, @generic="915d0a7aa8050092f1fbc2e49d01682a8fcf8d077c98ce362d0e2d3c9d433ff474c7247f20b249b89c0b3134a1c4cb32dea61bb30b38851595cab6ee3c5be3eb53"]}, @typed={0x8, 0x20, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}]}, 0x1d4}, {&(0x7f0000000740)={0x17c, 0x13, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xf0, 0x7b, [@typed={0x8, 0x84, @pid=r6}, @generic="f603abd8fddd46f5748094214daaa972dc7085340f44ee747d8f1d419884250cb9a0438d65c8b82a026d246f78bf038fa3f09bac930e68c2a8f1b68185f33b8a8cfc01a0d99f14347ad86589d9fa5aee31c62e567c9176e75a80d8c8ccfc845ff512d5860dc570eb6aa2168d2a52b125755bb495d7aa16c2d2e3016d3e656a16f7c9e9e56951c0dda383dd98d0488f9c3c1b591178f01d422fcaac9e3bc2a9f3b6c95c1245eef1b64c0f35327694168566d3", @generic="818164955bf57c1ae341f54b40733fff7bc384e94d46b63b35f2df6c1180afd79d9361905839d4266eb99a2632d3a748aa0d"]}, @generic="5a9fc1c3d94d69e63eec349545923ada99bbbf98ad22b082424da447591d1ef85794977a493a67e468212e052947ec53a97c2b2ab3904cad0916b016014ec8d4460a808fa947b32e7d7f41258ebfdc7ee57651212e9984fce811a10ceb36d38ad16e828351de", @typed={0x14, 0x87, @ipv6=@dev={0xfe, 0x80, [], 0x21}}]}, 0x17c}], 0x2, &(0x7f0000000a00)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r2, r2, r2, r1]}], 0x50, 0x20000000}, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x406002, 0x0) accept(r2, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0xfffffffffffffffd) sendmsg$can_raw(r10, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r11}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x0, 0x6, 0x20, 0x2}, 0x32, 0x3, 0x0, 0x0, "8e52a5864961e34409ac19e14d4d783608ac905988a200818e5a056ede1e424eaf8a82c4bdd18188f85a28e019890dc4f843489ee4353ba13ca741c04534a6dd"}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x14) [ 1564.899845] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x0) [ 1564.941920] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000fc00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:39 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x97, "bd676711c3b2f88f9afaf826695c57f243718bd36388a480478c5a9f3fcecba8cfa54fa9fcf4900d0333be7e755ceef0a0210de20a290cb6089a94c573f280177b211d94b6125ae1b07d429b7756035525068898496a9a322cddf16541eced8a41503c4e5f81ce7f0601a3e11abc9b08c69a39221d3648e14256019dd4c2d5a19f8620eb47327097f9add0415d0f1c7baf3fded735a868"}, &(0x7f0000000040)=0x9f) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x7ff, 0x4, [0x45, 0x98, 0x7, 0x100000001]}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1565.064313] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1565.115419] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020002300010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x0) [ 1565.308074] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1565.350874] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x0) 19:10:39 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x381041, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020001f00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1565.571139] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1565.631362] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x0) 19:10:40 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x8040) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x900, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) fcntl$setpipe(r0, 0x407, 0x2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:40 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:40 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)=""/180, 0xb4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) bind$packet(r1, &(0x7f0000000180)={0x11, 0x10, r2, 0x1, 0xc6, 0x6, @remote}, 0x14) 19:10:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfeffffff00000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020006800010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:40 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1565.897711] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:40 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x3) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1565.968130] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x0) 19:10:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020001400010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:40 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x1000, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @rand_addr=0x1}, {0x2, 0x4e22, @broadcast}, 0x4, 0x540b, 0x9, 0x6, 0x9, &(0x7f0000000000)='bond_slave_1\x00', 0x4, 0x5fe5, 0x80000001}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1566.158294] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x0) [ 1566.211394] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020100400010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:40 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000)="605a32b36c579d2c496385d87f1ea1105de743acd7f1c1bac06e817d5b9656b53572f30ad51ce970045c4e7e1094751b846f4d98b9c8e76d254c86e80bc52c8411df583a017085f32d03ef7af177c8c86154d293970d0a8e32cc4bed606bde08b9a2e08c236fb4974f3ac40530751714df69c691b55e", 0xffffffffffffffb9, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) 19:10:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x28) [ 1566.387624] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1566.428789] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020003f00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:41 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10001, 0x100) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x9, 0xef, 0x345, 0x8}, {0x101, 0x6804, 0x80000001, 0x1000}, {0x80000001, 0x100000000, 0xbe0}]}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1566.613077] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1566.645911] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xca) 19:10:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfdfdffff00000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:41 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000004a80000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:41 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x401, @ipv4={[], [], @multicast1}, 0x3}}, 0x800, 0x8001, 0x7, 0x7, 0x80}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @loopback}}, 0x2b5, 0x9, 0x1, 0x6, 0x2}, &(0x7f0000000300)=0x98) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x9000000) 19:10:41 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x40020000) [ 1567.133455] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1567.133455] [ 1567.178027] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1567.178027] 19:10:41 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x20000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:41 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x600000000, {{0x2, 0x4e20, @multicast2}}}, 0x88) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000296f0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x1000000) [ 1567.338513] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1567.338513] [ 1567.402673] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1567.402673] 19:10:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x4002) 19:10:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000004d60000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xca00) [ 1567.692515] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1567.692515] [ 1567.781691] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1567.781691] 19:10:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xffffffff00000000}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x11) 19:10:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000004d50000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:42 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='@,$selinux\x00') sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000180)=0x8) fcntl$getown(r0, 0x9) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r4, 0x200}, 0x8) ioctl$TUNSETLINK(r3, 0x400454cd, 0x321) 19:10:42 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = getpid() prctl$setptracer(0x59616d61, r1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x803) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000000c0)=""/88) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:42 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000820000000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1568.236793] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1568.236793] [ 1568.294737] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1568.294737] 19:10:42 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x6, @remote, 0x4}, {0xa, 0x4e20, 0xfffffffffffffffa, @mcast1, 0x2}, 0x7, [0x2, 0x5, 0x0, 0x0, 0x10001, 0x14, 0x7fffffff, 0x7]}, 0x5c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xffcb) 19:10:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000299b0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:42 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000002840)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001380)={0x0, 0xa3, "76ccb85450b74b417ebf236c22a5ed582426f9391eab8dc7f75e227281c786cd4ed2b629c8c6368c1ab806314e14aa2dea78a6e7d50b1aed541cf13fe8cae3371e3ed045f49a1e87234cd15beb1dc38ee4a1fe546a0b36b66bb152d334746e53026d4170bd149027960aef556991f0028342672b2bac66d0986e0df4b6852cc29a91510a66fed112bfd6ab227d5d458a6b2e296fc50b0309b3f3cc8d115e41425a7acd"}, &(0x7f0000001440)=0xab) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000001480)={0x0, 0xfff, 0x1, [0x1]}, &(0x7f00000014c0)=0xa) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000026c0)={0x0, 0x3}, &(0x7f0000002700)=0x8) sendmmsg$inet_sctp(r1, &(0x7f00000027c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x80000001, @local, 0x6}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000180)="6660d212b012277397445d381082cd7d1f857b92f4ffba9686708761d155863bb0b2c1c195c3a0ab9c22a085cfc74b85a9b9137cfabae50f6fc16b3c0438d7067d01da94d3fc9a20fb12b1a234e802515627bda8f07db7bf99c73bd703726a52ec4623a22ce5d673b3c73b63835d8644d20049215d0019fa33a9efb27d6af25a0f9be2bd6e0a6d513a57390fe4c61cbfde8c772315ed76d993c5135e082ed8788e67bde473082b4c1628ba4f79354f493142fa775e047d4118ecc04e89a2e2cea6bf0ecc8a4a93f3e481c0a93c30cc347307711588040ce2fc716753f1892f537d18fed284e9a10f28666e3c28360f88e205b584e018eab21ac59847f8852ba55d6cc6fc04786a2626cb0f7694781924afeca0c5482a411a059687cbfe783c39be603ddc9e33469b6a0e1d06911b552a7c8bef59ed6ad9b7c6a9ee58d6253dc87b172cb988c3477445f5433d574b610081326f17d1b075a7c6c2f1db9a2e2e367ca18f6f114e7671ef35ace7ac41ba6d4fe59075ac050187fb270f57dae23e1b5b3f2608853b1e1811cac3ec51a95394da71bb7200f1d9379f56845af686f4f861d532560255699c050de1421c822a5ce17026223e8b259bd1443925cae8eb66224d43ac1248a4b11445fadda82ae996433fe19252d0bfbea8e1852f8cfa9dd3b8fe0f55fc30cb8609fa0eb823b175b6843e1d526781c505c447698b7792fe8bf1a406b25b58e72db77093328b50379164ae24e38c07e2fb6f0740ddeef5576627458c31e2f419e871a5efc90d5a4623e95a441ff861dc5067ebd6b29ce00fbdf6334e4bdb032c672a44769631cbdfdae3be45d24b86cca584beaeff526cd9c86154441f29f8240ceb24fb015d68ab4ebbf733846fcce4fce276977d3c327c6a2010a626394cb09da99baddf1e2667e7d56ebb21c36a4b8eda7d06c72428afd195b5068f6e9a11d54951f8b842f8d84b1f1f7e23d4ba15026441e4e5b587d516a30412530714fed8620ca8bd82502dbe676b6ea1ad2b43d85b03f778489b85f83125fc509cbf22fa15e1f169f6a8ba7c6030222443720a5f4c1d5916e7fb2a041e4223915a92cedb2d7f96e3c0c6dc2fceec1c64b7d899ff1a77be1cd56d1fde50737aae2e20fac67c2fb17d0dbb29ca6d995a1435efd6155ad8f8e1533cadc33ce72dc9089a7105b6d628ffe9ac68f2c3acb72e63c6b6472cc28c6e1b5d713d47aaba494bb6acf271943442776b9089b401198d4a6b1329a373f0f9799aa169aef9d3d2b8b5674e0aff7c2899925df8f60f6a93901304764797f384055ceee3fe022844e40adf90831dbb5e138629310304cdd83fe341d8973b2d93e6712f54ecae8e8f714b2c0438102890266ff424fc337abe58099cfa007263829fc16c88fd8e73f4ddcc4454a21ef049219c2f5f6aed97fc4176f6c251993be7f0eba01b519287247aac0f0f6c2e60759911580b744565611c802e9f2066a461ccac2dff7d12982eac5b8aae4515556646be04621d3205cd7feddea2a8025f3d78ab8ee2c97def56450175e01068901b93c9f332015a3a954acd9f354c20629f92e7385997c95e13864af36db7bff517bf52efd6eb6b8d47502db11bfab2712338cfd2b8ce4032fc81635384cf923cfd53bfbe8bc4f218cc349406cf39e1b21909a850532b445a4596bd7a2ebbbd2d2550e536d2a243d574cab0b0644e311d0dcaed4e8a854824f7d163f02dfc923c8afc92bfeb4c2033fd5c56480e7ad08e65c3a2da1435a25ab40b09a74595ad5282a806a841f7b9af375f285a1ed2a8e61472d16dc515717c0696534b40144a527edfc936bf3acfb65cdf8faf7451501316fc6e28fc1087996d761b5891acc82327b1f96a956bebb34659ef33e5b23d8d9e02ccb736881982a28ca1e8f483996c55e53227ee13eca132c94f60c2fd697f7717bdcd127525eb942719a9ccb4e20323656e170645b32d16ec204a0ee576dbca85de3040496619bb674bf42e4bab2f7fde629a3f51295568eb5879ad5dc774903a0183fa73f2bb2166a599bda561e19cc5719b14ffe372bd0b4c05a6f1482b4983c1227d7d5d8c202a77a322f8837494785a77038c9fd56e62e48d93a0ed8cb6259dfb6ee420f3ebb3c3a5530ef7f927f8209ad0239f35eac70f80eedd893157de97e9a74320fd94423eb8de3b8d06f99a9b0371c9e249bbe9d82be37b41de39ef0f1d236ec95f28a70b94e7857ae13986f193242f8a46f27612155903104bc3e81e826723dfe090129d44d604a286af3a312c22232016c3188364398ebf815d40864e79819b101cdfd85fcdf05ddf198970c84257da87071555b8c9335844cfcf936e9419dee1da7176ce90233bdd228989414e724e3399a946ee9c30aae9a82b6d4564bc417f9b6960388916ede307592e348554ad8706ef05dae5dd08017383fecb32dd5ef6f808ffbabd66e65fea9c72980ee90aa4dd4edc939dd46aa6ac644b134543be9b57d2b6695c26ddeadf75e328c060fdec277fba93de35c01102d04874c6147ee4cca8413e3cab0baf813d146a8cea1894c845f2a3070f599ad1e6e82689b9eed91b1fd9062875b8ccdacbaffa6a44a1c6bb7eef190fb813dfa5dc6005c8c68a3e52fb1d58ab065592f4c9915f7a21d2163fb86dbc167feab6f880a8f641939f26ad1764c47883e03e61267746884838f7efac8e4db11e0474dc88b16cd8caf147fd236ee765925780f5c93928d980cc253bcaa55b80cdb0d9dfee41bfc968f4f0c03a923a71369d00cfda525c58505e7348eaca2335f39665fac42740a9aa4042af1f99d28fc8e12b67e29b0511e50b74e218530da03342b0e5c9cdb2e17503c60c29420ade4904e9850efe8a656f992687af4b63c6249a6e25e0f9de9bb21c1f52cc18773940165cd7746b5c74a9873bf018ade82f84d75432436092e7e97739bf3fe8159c8a84ed132c5eecb2288f5d3c00ad6da715016ef277c71dde8a378c7a7f23432706b13bd7c677312968fc7406627c0b363438ad718cb338a39a1f67587e714bf7a386e451948319c023dd5a1086424740ba611a2e70449ab551a8609efb4076d22bff3efacd1bd69c6310e3be1038c7ea76dd1a68144ba14bb8605d37d90f7c5f22545f14101a63e2ea7fb809449fcbc831b7fa405628ccdef3617b52214a971393d3afef6b8d6a988431485704d86205e80cb1fafa502f1ef0c7e6e658e7e430db1064396e0a1b2430a99c705217df3b8933ad15f2546247a6ee3490e8e7d47ab407a2c853157e33493a220e58a7fe55414289e0d53f9e3ad29f8044efd36a4f15e4c2f1a5db6f7bf28d55879cd286ea063131525e3fa33071c4e62ff2690a938500e1e4d5a0887edc765f0c34120278e817b40b203a3d46a74dc81d48a0b8b741e4b9ea86f73f23bc2fe7ac4b22785b503e57cb3abb0cd3aefdf87aea8d6bbdf8873be5dd6aaedf571864df8e144f2ee50ba51a5ad3e49c26a262dfdb69e3cd4009d1e4fa74c5c31ecfa015a59525fb4ad94de0bc075cf781102ccf6d09184fa86f1820b79cb11416eb5027e16efbb61707af37a0d7653489cb2f6bc5ec3df55c68027a342229b0ea1502b08cb467b1e1b5f0537a2ed48319216ad7028c8915d9890288674facb3a61a371f5a0b1dc810190266ef94be28738be942a72a36c6366ca96b7cda51844547829898fc739e91c6c98bbe58bde47fb99a7ecaa7b1d0eff0b63f51e9a412c9974b957a562f2e2ef325c2ddb33c3a9afbc92b24ab4b438e45ee28777cafe6cde33de1cb31cf3d8f9617fd4b18df299af6ee279560be02df3e518329266d35620c39f827573480bf6679b3adfb493816e392e303d23b56e020e26b918bfd4d989ba8c45ce79f1805ee7a5e97321760e285271e86f08dc9812e2ae263d6c77fd4dc20b312b549d2b0c29d8964525103bd768a4c67574127b655017d537673c9446d893fa38cd6b4d276d116c6d56de210474ddbbf08148a0641c9016ede11be02d12bae76cd54bacdd3ca59b0332da014216c596af21eb19bbf096ef3592c435abbe2ee1a0a301ed3e867a3bbabf8414b2c2eda807c2d4faff6003896da7ded8e1b29ec95a9e23b039c05a993b4304b01fe27337d4fd0e336d0bb79d75be78575bc0a21d322008d851825c46815b681864d272db43580e5215188bcd9ba94d1b6f07d8afa1b4ac4341091afc2cd56def9483b2b6232ebb981a04b4f53357925ae76f0c6f6054a246d942c03a6cfd1a49a60b8f165149fe1fdbfd90055d755d48fc9317240ff4bde07d9f9649d70a9767ccd570a407d72415aeca87bf31231a81c21561860b78626325b705c5138139a6ba74d65a9875917bda45bcb8a8c988cb1b05df270e5045e6454218608cad593cf2fa198b78f1cfd2ae6f382f56248438b64494ec866a836b94bf7a945598eb60e8926a7da58ff8c86d6629bc6e55be3574ddcbb8fe72d0e049f497b666b5e960ff8f22c781ebfbcc506246df84067d765391e823e9b17e0fd3937ab0d96835a105effb14c09e937f92f83a19eba99fcc908e6bf2928d311abeadd4615969f138b506e4832abec3ab4ea50e29867df1f7645deb681916019ada76228039070132178a214724249d9695cbda38055b59f88d842832234512e7814bc24193400f0ca7ef0c6d3fe022b1d595c228a0ba50b82b6c67f6274fe31a8d39f56763d4b488cae0459ea9c0d674715c701e84f86ab35146ca94d48a05f053803f2fea2ec7a11d8cfe4e2fdaf868c8e36855dd04aa970efe3b34e0061cdc0c86f58d4476605ba15b0b0a6098e5e8cbbc94b20b923d22498c9ca34b10cd20358ec297034c76c2ba4299cc3a372344fcea0b859782a60683aa669facdd98c8f8f5fd5a125e17bf8d29289745d4db3a006a72b053ad9dd15f34c19bc7c28bd1f61d33f4d97fbe429f8e3663b57778207ac22742192842d2eb43d04f115e7f0d6ba94e496c9b3e11e9e795c05517597ea69213a83ea16e5d02b9a753773cfcff18e2126b937d73cecb005f6b9a21a737f00d195dead06b7e04809eae21ec3363bae091fefe0ea9f54bee128b14d2e80d2f323f38cef62f9be7c75fa5f35c07bfc74186dd0baf3200cee05d1beec2a9d1fde3858ca54777b44434b10e32edbb75f85f3d3f60646c777c7fa2331c042bcb96943626b05f08227112e11682d30c0b9fc171b8433538e7a72fe72528ec8ca775e2377b509c0791d89969982c802d6887155a9822f0bf99009d35ef816ca037283115538e9696de041205bef1c9407fe98b0ed8593f0e8673c9a2671bb09af9382fc9924a97b523205b3734e69657b22512789df7f28932521e0b623b1d1acf7fb278c25fda1181b3d20b8f81d3273d021152ed107442644cfdde67f21abc9fe7530bfe05233a145d26f2f1e8db4c65d5d47e62c7dc091084f913b96cf5878218c91a287cf0060e4337462ba1267dc27351b2683fc0384726091e83da80e29d8b91798c386597cf94e712806101aa2b2db03518ccb4442f9350a1e0ee659f910bca87ddf9b12c97d3d475d982ff2eb9059bfb99fb64e7d312b6a19ad759478d580fe006a0adf89a3e71b4bbaf3edce027a51221aa184d252ec6d7997314e8e65bff6b279ccd87ce973bc215f5ae48bcce2dbe59d9eef248291f2c7647d7b20c2c8e4d1a6a86614813007cfd77e8e0d077fab6dcdec16a7f75ba27616c09eb549c20a810109e090cecc8bdb83fc3d603b57d1c8b106799aeaadc6941546d0d37a774d1a68aae55a1a90e99963a7deca2ad1b47e57db375c", 0x1000}, {&(0x7f0000000040)="ab86950fbc7280d16878b0aaef46455382507dbf2e32b571286b3ab01fff5e9079b42fa95145486f9f109ae2d4af0cd5c95c0c7800b8f9df", 0x38}, {&(0x7f0000001180)="c3452cfe452bca20839aa38371e1ff9382258a0320ed3cd21c95a719db975ec93b67875e65f9aac7afc4deb34c4ba902b00cfaa626c94e6df190eceeeeceba5e2bec77a9b8da38e5910cac3bd31c76911cc9159dfd51a773e9ae145893ecb9c0935044e397ede2a1179ef40f4446eb8d201735b1a25bf4953e341cdae36805fa37e1867fa2595da048066b2bf760778d6533308ef5243f189727", 0x9a}, {&(0x7f00000000c0)="8cb00d037099a12a84f14e00b0e34dac09b21b7359dc0b09b6b1a94dcf6b2a64d2ae59934c97b5b75b556c56714d266bd928d32e69624c9b8615ec11310e9909b1e8a044d01127fb77342129b62a594196250d53cb5c1f168897e7a379735a7740a654c126a48cf255ea07d6", 0x6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000001240)="5432f87c050f7922b2e4fec7a1839017768dc2909c65f640c54de2dd8ffb01214daeb5b6dd13da0d9be9d225fd188f4b2cfbd41c9f56903c3f7bce696b536d4836f830e0019b04139c874e0cd81b7190ee954e2df552368b20d511b643ee3e32c94c1912e8415dfc45347d60a199fe69f8522130dd5f012fddfce932595c5e621569a16c9969a1a56f40f33b388cc1af1502befad9c84084d536", 0x9a}], 0x6, &(0x7f0000001500)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xa}}, @sndinfo={0x20, 0x84, 0x2, {0x20, 0x1, 0x5865, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x400}}, @init={0x18, 0x84, 0x0, {0x5616, 0x1, 0x9, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x101}}, @sndrcv={0x30, 0x84, 0x1, {0x7ff, 0x7, 0x200, 0x9, 0x2, 0xffffffffffffffff, 0x6, 0x7a9, r3}}], 0xb8, 0x20004880}, {&(0x7f0000002600)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002640)="7dc7aeeb4c802a7979c933f0729156a9c31fe7808286b718f60aa773ecdadda6c7685b8641d94f73876597975747fc893ed3c9f70fe10cf0742aba5fc0970e", 0x3f}], 0x1, &(0x7f0000002740)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xfff}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0x0, 0x1, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x58, 0x24000004}], 0x2, 0x40) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1568.464802] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1568.464802] 19:10:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x7163140000000000) 19:10:43 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1568.518384] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1568.518384] 19:10:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020040000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfdfdffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xcbff000000000000) [ 1568.740958] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1568.838760] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfeffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000700010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x2000000000000) 19:10:43 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6ed6acea}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000540)="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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x7d19c7b7, 0x3}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, 0x8) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000100)={0x1, 0xfffffffffffffff7}) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18080}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x202, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x40004) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r6 = dup2(r3, r3) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @local, 0x7}, {0xa, 0x4e24, 0x8, @mcast2, 0x3}, r7, 0x101}}, 0x48) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a0000e7862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e21}, 0x10) 19:10:43 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="e3", 0x1, 0xfffffffffffffff8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) keyctl$chown(0x4, r1, r2, r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x200000, 0x0) write$cgroup_type(r4, &(0x7f00000002c0)='threaded\x00', 0x9) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:43 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1569.415387] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x146371) [ 1569.460568] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:44 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x3, 0x100000000000000) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000040)=""/11, &(0x7f00000000c0)=0xb) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) pread64(r1, &(0x7f0000000240)=""/154, 0x9a, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x3}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x1f, @dev={0xfe, 0x80, [], 0x1c}, 0x7fff}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x1}, @in={0x2, 0x4e21, @rand_addr=0x38}, @in6={0xa, 0x4e23, 0x3f, @remote, 0x6}, @in={0x2, 0x4e23, @loopback}], 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000004d70000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xa00000000000000) [ 1569.734322] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1569.734322] 19:10:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x4000000000000000) 19:10:44 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(&(0x7f0000003200)='./file0\x00', 0x1, 0x11b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000003240)={0x0, @in={{0x2, 0x4e24, @local}}, 0x7, 0x0, 0x1000, 0xb931, 0x6e5}, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000003300)={0x0, 0x1, 0x2, 0x6, 0x4, 0xfffffffffffffa6a, 0x5, 0xffffffffffffff45, r1}, &(0x7f0000003340)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x203) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)="766574683100000000ffffffffffef00", 0xffffffffffffff4b) r3 = msgget$private(0x0, 0x204) msgrcv(r3, &(0x7f0000000180)={0x0, ""/122}, 0x82, 0x0, 0x1800) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1569.813636] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1569.813636] 19:10:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000207ffffff90000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:44 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1569.975565] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1569.975565] [ 1570.014505] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1570.014505] 19:10:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000020000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x20000) 19:10:44 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008200004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:44 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0) sendto$inet(r0, &(0x7f00000003c0)="de0ac0b90874dc2d504a1436a48593a4814ebf8c7d699ab6705d210b4ad9546a79e05eedc39a7f835c6ec37d61d2b3ae3086c4e4ed737a5a0e468ee79efecc063aec4caaa9ddf04d6b68ba36f01f627fa6565dc038f52d6f19b303598bc08f71b352911f3e63b87eaea83ea9d6523215c44242909dee21be24ff9fcde2c0f49a2d5dcaf0aa38635e30f4fb7ef444eec05c96bf0bb4dd16b88d30511f21fcbb3fb98c5abe55856325eebfbc9459e2028716780111a25367b166aba815f5c4664ed2bf8b8d5fb2e1b86113ced3abde12e5787f", 0xd2, 0x800, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000280)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x4000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca1273576ef9c66b3af28f32ec99bc231c7cab574a7e6fb81f0666f1bca3600d6b9eab77eb519f90ed314df54e817cc688b8bf2eb173a9bfb79567eb2347b4f013ad777cb1fcd1855149711163d0ebc29"], 0x1}}, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000004c0)=0x47fb) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) 19:10:44 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="283aeda3cb1b7cc722773062133d760dd4ac07ecdce5ad487149584d73d2089b2c04245cfc9bbfcb4fd9c4c6e38794ca473d58f359c71c5aafd36b143fd3b7e148b6c84aaacf92d56d16988e5d5bfd1588fa8925c31ea5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0x24) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x200, 0x20, 0xfff, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r1, 0xfffffffffffff829}, 0xfe63) 19:10:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfdfdffff}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1570.359606] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x11000000) [ 1570.430938] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x4000000) 19:10:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020002000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x1400) [ 1570.787921] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1570.871920] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xc9) 19:10:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000900010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xc9000000) [ 1571.049086] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1571.104783] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:45 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x1, 0x10001, 0x7fffffff, 0x100000001}, {0x0, 0xfff, 0x8, 0x2}, {0x2, 0x0, 0x6, 0x6}, {0x37, 0x91, 0x1, 0xc2c}, {0x3, 0x4, 0x4, 0x1}, {0xedb4, 0xfffffffffffff800, 0x8001, 0x400}]}, 0x10) 19:10:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020030000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1571.230393] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:46 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:46 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x402000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x3, 0x6, {0xa7a6, 0x1}, {0x75, 0x9}, @rumble={0x2, 0x27}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 19:10:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x7000000) 19:10:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0xfffffffe}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020102000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:46 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18a1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0x17, "81e53bceec1cb2e5fe4461e68e3f405bb4fc8d45bd28b7"}, &(0x7f0000000100)=0x1f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xfcc90f00) 19:10:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xbf000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1571.776942] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000500010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xcbff0000) 19:10:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1571.971900] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:46 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x5, @remote, 0xaf}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x8, @remote, 0x40}, @in={0x2, 0x4e21, @multicast2}], 0x58) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0xfff7) [ 1572.041342] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x700) 19:10:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020007400010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:46 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfff, 0x4bc3, 0x8, 0x3, 0x0, 0x8, 0x40110, 0x9, 0x5, 0x3, 0x0, 0x80, 0x7, 0x4, 0x27a9, 0x5, 0x1, 0x80, 0x5, 0x5, 0x40, 0x5, 0x6, 0x341c, 0x7, 0xffffffffffff00b9, 0x5, 0x80, 0x9, 0x5, 0x2, 0x5, 0x44cb7fd1, 0x0, 0x7, 0x7, 0x0, 0x100000000, 0x6, @perf_bp={&(0x7f0000000000), 0x9}, 0x602, 0xffffffffffffff48, 0x9, 0x0, 0xd4, 0x4, 0x1}, r2, 0x8, r0, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1572.186639] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe00) [ 1572.250025] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:47 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000008200000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000004000000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:47 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = semget$private(0x0, 0x0, 0x400) semctl$IPC_RMID(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1572.666170] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1572.666170] [ 1572.686410] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1572.686410] 19:10:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x1400000000000000) 19:10:47 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x181080, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0xae8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560af3ff6ed2720da78c21b70efbdb68a50d1ef862f327e2f4f00ed000000000000d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020020000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:47 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0x2, 'wrr\x00', 0x3c, 0x0, 0x17}, {@multicast1, 0x4e23, 0x0, 0x5, 0x5, 0x7}}, 0x44) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1572.889037] Unknown ioctl 4705 [ 1572.907692] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1572.924064] IPVS: set_ctl: invalid protocol: 43 172.20.20.31:20003 19:10:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe) [ 1572.964981] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1572.996929] IPVS: set_ctl: invalid protocol: 43 172.20.20.31:20003 19:10:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020080000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:47 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vga_arbiter\x00', 0x6a000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000a80)=0x8) r3 = dup3(r0, r0, 0x80000) getpeername$llc(r3, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x325000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r5}}, 0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r6}, 0xfffffffffffffd28) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f00000001c0)=@generic={0x0, 0x10000}) 19:10:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x8000000000000000) [ 1573.276763] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:47 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10) 19:10:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020002d00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1573.503720] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1573.564537] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:48 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xca00000000000000) 19:10:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000299d0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:48 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsync(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) getpeername(r0, &(0x7f00000000c0)=@can, &(0x7f0000000180)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x84}, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:48 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x20, 0x3, 0x8, 0x346}, 0x10) recvfrom(r1, &(0x7f0000000040)=""/52, 0x34, 0x40, &(0x7f00000000c0)=@rc={0x1f, {0x1, 0x2, 0xffffffffffffffc1, 0xff, 0x1, 0x2}, 0x7}, 0x80) [ 1574.425352] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1574.425352] [ 1574.488122] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1574.488122] 19:10:49 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @dev}, 0xfffffffffffffee4) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000100)={0x1, 0xffffffffffffff9c}) poll(&(0x7f0000000180)=[{r1, 0x100}], 0x1, 0x401) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r3, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000280)={0x3, 0x1, 'client1\x00', 0x2, "38d645bf47ad7ca3", "915cccb608168f55dc97ceddba204612eeaedafa85528ae0383506683cc4356a", 0x0, 0x3}) r5 = getpgrp(0xffffffffffffffff) process_vm_readv(r5, &(0x7f0000000780)=[{&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f00000008c0)=""/229, 0xe5}], 0x9, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f00000009c0)=""/77, 0x4d}, {&(0x7f0000000a40)=""/50, 0x32}, {&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/158, 0x9e}], 0x5, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 19:10:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000299a0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x71631400) [ 1574.698778] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1574.698778] 19:10:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x2800) [ 1574.754454] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1574.754454] 19:10:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020e90900010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x3400) 19:10:49 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23}, 0xfffffffffffffe36) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) socketpair(0x17, 0xe, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x1, 0x8001, 0x7, 0x5}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_yield() [ 1574.982758] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x5580) [ 1575.042204] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:49 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000202d0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:49 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = semget(0x2, 0x2, 0x4) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000400)=""/41) sendto$inet(r0, &(0x7f0000000100), 0xffffffffffffff5c, 0x200007fe, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0xffffffffffffff6c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x0, 0x2, [0xffffffffffffff56, 0x1]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000540)={r3, 0x1}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x9c) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d99a9dcd6881d692e53d55ca127"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0xa00000, 0x4, 0x7}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r4, 0x5, 0x1, 0x0, 0x7fffffff, 0x1, 0x4, 0x0, {r5, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x8, 0x8000, 0x8, 0x1}}, &(0x7f00000003c0)=0xb0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x7, 0x7, 0x9, 0x4}, {0x3, 0x1, 0xffff, 0x2}, {0x8d7000000000000, 0x4, 0x1, 0x8}]}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:49 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:10:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x28000000) 19:10:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:49 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1575.533776] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:50 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x200000002) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="dc94e28cc23ac0bf8bfea5f09a640cdb", 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3f05ee2720da78c21b4b1070efbdb68a50d1ef862754f62d9982fbcf061d692e53d55c"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x7fffffff, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xeffe0000) [ 1575.603471] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200e8200010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x34000000) [ 1575.817192] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:50 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x18, 0x1, "7414083c755461376bf40d0c0c387281ac511b433447494ccd30ee96bd0d475c12c43937ee9748c4a7d9add57136f2534a59d32738355405e98b6f2db1df51ec", "c2c6d48a122ece53af4bf1d2372cbccf57368c112ea27f51ccde9dfcde3a6583", [0x3, 0x7]}) [ 1575.858830] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:50 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ec2720d1ef861754f62d9982fbcf061d692e53e05f85f4dfb83cb82800a53b9e53eae85ca13d837e16a41458417f236790bde29f6e9848cc0d4be44c6907139400cc783d334c9c340d59284c21346761a8abee38480f06d1a881e2d5c851a15207550dd8f9cc3a948e85372b0b60754d259c40ff57cdd92b8cbe50e2239ff9830b4dc25c30b85845c5e3b4947822f76924e439"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200fff00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xffffffff00000000) [ 1576.041292] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1576.081232] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x900000000000000) 19:10:50 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='team_slave_1\x00', 0x7) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x4000) 19:10:50 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fallocate(r0, 0x20, 0x0, 0x7) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x40101283, &(0x7f0000000040)) 19:10:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000400000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:51 executing program 6: pipe(&(0x7f00000002c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$cont(0x1f, r2, 0x100, 0x101) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) getsockopt$inet_int(r3, 0x0, 0x2f, &(0x7f0000000180), &(0x7f0000000280)=0x4) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1576.510192] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1576.510192] 19:10:51 executing program 0: 19:10:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x700000000000000) 19:10:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020006c00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:51 executing program 0: 19:10:51 executing program 0: [ 1576.740536] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe00000000000000) [ 1576.797344] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000100000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:51 executing program 0: 19:10:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xf401000000000000) [ 1576.968951] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1577.033767] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x14000000) 19:10:51 executing program 0: 19:10:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000050000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1577.315603] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:51 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:51 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20}, {0x0, @broadcast}, 0x2, {0x2, 0x4e23, @rand_addr=0x4}, 'ip6gretap0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:51 executing program 0: 19:10:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xca000000) 19:10:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x3ff) lseek(r1, 0x0, 0x3) [ 1577.419616] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000090000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xa00) 19:10:52 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) unshare(0x2000400) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) ioprio_get$pid(0x1, 0x0) socketpair(0x1f, 0x0, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000080)) 19:10:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xa) [ 1577.667808] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1577.732858] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000003900000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x34) [ 1577.950131] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1577.950131] 19:10:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000a00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x14280000000000) [ 1578.170720] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1578.249391] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:52 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x587d, 0x5, 0x657e, 0x6, 0x7fffffff, 0x3, 0x0, 0x0, 0x394, 0x38, 0x112, 0x3ff, 0x7, 0x20, 0x2, 0xfd, 0x0, 0x1}, [{0x7, 0x1f, 0x5, 0x10000, 0x4, 0x4, 0xa2, 0x12}, {0x1, 0x8000, 0x8, 0x89, 0xbd, 0x8, 0x6, 0x7}], "e1c222ec21f6b6c7f05fe69c139b978c0031f7e8cdcc9fbffec5c92d190ae3adf2afdf149b73583eaa7682245dc249335ef2f5851ab05a3b5e040b7a8e1f5006c8c2fbc18f9db5599a66fad9c3d685a7d5ab4043451fd03bcd55a9701cc46c3ce49670243197816b8dceb6db9a3fcd40cc6854f7e9b9db772bfd7022485cde4caa76eac54a8067ac8dd03c14419db214f6a9768481a0f408fb139bd1966ceb9f77b60d072a0b1947319c5c6f40c7bf2e541decbf71dbdec0edec10a11c83626bf72fea64c922cd9ba3146f3cf7a70c6244954e5ef157509400aa83a8f041", [[], [], [], []]}, 0x556) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x240) 19:10:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xbf00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:53 executing program 0: 19:10:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020004000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x200000000000000) 19:10:53 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:53 executing program 0: [ 1578.658364] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x3400000000000000) 19:10:53 executing program 6: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:53 executing program 0: [ 1578.717916] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000206c0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:53 executing program 0: 19:10:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xa000000) [ 1578.938438] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:53 executing program 0: [ 1579.020138] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020070000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1579.233698] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xf401) [ 1579.298121] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000ce00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:54 executing program 0: 19:10:54 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:54 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x4) 19:10:54 executing program 0: [ 1579.590579] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:54 executing program 0: [ 1579.669816] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x7) 19:10:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020004c00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:54 executing program 0: [ 1579.822208] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x281400) 19:10:54 executing program 0: [ 1579.880913] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020764e4bd90000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:54 executing program 0: 19:10:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x4002000000000000) [ 1580.150178] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1580.150178] 19:10:54 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) socket$unix(0x1, 0x0, 0x0) [ 1580.199804] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1580.199804] 19:10:54 executing program 0: 19:10:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xbf00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe803000000000000) 19:10:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000ce0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:55 executing program 0: 19:10:55 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000008200000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:55 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="19a5ebc033d0c560ab3ff6ed2720da78c21b70efbd03aa50d1ef862754f62d9982fbcf061d692e53d55ca127ecef9cf3d47b24e9c7ec97b4a46275e406546866814631d8fee154362d6a1522d9500feb94535480719411edab7bef80b571aac3b8c293f501f50159715dbb5a5acf627ce0a8a737576e992e"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:10:55 executing program 0: 19:10:55 executing program 6: [ 1580.815067] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1580.815067] [ 1580.847381] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1580.847381] 19:10:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x8055000000000000) 19:10:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000930000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:55 executing program 0: 19:10:55 executing program 6: 19:10:55 executing program 0: 19:10:55 executing program 6: [ 1581.086340] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1581.086340] [ 1581.178039] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1581.178039] 19:10:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x400000000000000) 19:10:55 executing program 0: 19:10:55 executing program 6: 19:10:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020810e00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:56 executing program 6: 19:10:56 executing program 0: 19:10:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:56 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xf4010000) [ 1581.660744] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:56 executing program 6: 19:10:56 executing program 0: [ 1581.754853] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x2) 19:10:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020740000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:56 executing program 6: [ 1581.980960] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xffffffffffffffff) 19:10:56 executing program 0: 19:10:56 executing program 6: 19:10:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200a0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1582.353225] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1582.417767] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:57 executing program 0: 19:10:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:57 executing program 6: 19:10:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xfeef) 19:10:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000300010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:57 executing program 6: 19:10:57 executing program 0: 19:10:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x40000000) 19:10:57 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:57 executing program 0: 19:10:57 executing program 6: [ 1582.769381] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:57 executing program 0: 19:10:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe000000) [ 1582.872955] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:57 executing program 6: 19:10:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x11, &(0x7f0000000240)="00ce53d2d56256f3319708acbe89cd81ea"}) 19:10:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x8055) 19:10:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000600010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:57 executing program 6: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000340)='em0\x00', 0x4, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600), &(0x7f0000000400)) [ 1583.467752] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1583.527734] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0xfdfdffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:58 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) read(r0, &(0x7f0000000080)=""/200, 0xc8) capset(&(0x7f0000000040)={0x399f1736, r1}, &(0x7f0000000180)={0x10001, 0x0, 0x0, 0x0, 0x3}) 19:10:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xbf]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:58 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) 19:10:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xcbff) 19:10:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020480000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x9, 0x450, 0x5, 0x20}, 0x1c) getdents(r2, &(0x7f0000000080)=""/35, 0x23) [ 1583.707366] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:10:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x2800000000000000) 19:10:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x9, 0x450, 0x5, 0x20}, 0x1c) getdents(r2, &(0x7f0000000080)=""/35, 0x23) [ 1583.775264] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:10:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020ce0000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x9, 0x450, 0x5, 0x20}, 0x1c) getdents(r2, &(0x7f0000000080)=""/35, 0x23) 19:10:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1584.006445] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1584.059470] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:10:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xc900000000000000) 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x9, 0x450, 0x5, 0x20}, 0x1c) getdents(r2, &(0x7f0000000080)=""/35, 0x23) 19:10:59 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000001f0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:59 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfdfdffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:10:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x9, 0x450, 0x5, 0x20}, 0x1c) [ 1584.655210] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x0, 0x9, 0x450, 0x5, 0x20}, 0x1c) 19:10:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:10:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x2000000) [ 1584.745154] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:10:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000004d40000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:10:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1584.910792] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1584.910792] 19:10:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x142800) 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1584.986439] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1584.986439] 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:10:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:10:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:10:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000003f0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:10:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xeffe) 19:11:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xbf000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1585.572339] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1585.572339] 19:11:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x1100000000000000) 19:11:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1585.627391] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1585.627391] 19:11:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000005e0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:00 executing program 0: socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:00 executing program 6: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1585.778046] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1585.778046] 19:11:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x1f4) 19:11:00 executing program 0: socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1585.838879] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1585.838879] 19:11:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000000a0000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xeffe000000000000) 19:11:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1586.059246] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1586.107220] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 0: socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:00 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xbf]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000029990000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xfcc90f0000000000) 19:11:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:01 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1586.549275] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1586.549275] 19:11:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x80550000) [ 1586.605240] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1586.605240] 19:11:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020600000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1586.775488] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1586.862096] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe803) 19:11:01 executing program 6: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020006000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:01 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x3e8) [ 1587.511672] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1587.546437] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002009e900010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x14) 19:11:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xfc9fc) [ 1587.777164] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1587.840428] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x100000000000000) 19:11:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:02 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020004800010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xbf00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:02 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1588.450615] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:03 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:03 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xe8030000) [ 1588.540300] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020004800010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:03 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x900) 19:11:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1588.746610] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1588.817954] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x1100) 19:11:03 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000820e010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:03 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000008200000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x6}, &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1589.382821] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:03 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xc900) [ 1589.477771] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:04 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000006010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:04 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:04 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x9) [ 1589.696542] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000014010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x4000) 19:11:04 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe00000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:04 executing program 6: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000001300), 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000b0008000100ac141400"], 0x1}}, 0x0) [ 1590.375959] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) sendto$inet(r0, &(0x7f00000000c0)="22ab84fbc38d459a7115567f2d47de8db07740df1e135e65fd97f5314e5ef453c110c488fa5dfd78a0853538e722849acc2a42493a8bae10827a6d519a1214a619dab0ac2e5c1548b1a249979e40681a97cd06c47a507bf9c659d5", 0x5b, 0x880, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) [ 1590.450073] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000000800000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x440000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x3, r2, 0x1}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1590.665114] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1590.665114] 19:11:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000ce00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1591.371797] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200), 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) socket$xdp(0x2c, 0x3, 0x0) [ 1591.419946] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000003010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:06 executing program 6: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:06 executing program 5: r0 = socket$inet(0x2, 0x3, 0x400b191) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x10) [ 1591.677544] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}}, &(0x7f0000000180)=0x84) sendfile(r0, r1, &(0x7f0000000240), 0x10001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x3, 0x101}, &(0x7f0000000200)=0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x20000) 19:11:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020002300010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1592.268944] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1592.293458] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:06 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xc2d8862c3dd243a6, 0x200017ff, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x570}, 0x9) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bcsh0\x00') flistxattr(r0, &(0x7f00000001c0)=""/248, 0xf8) 19:11:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000400010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:06 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1592.492853] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:07 executing program 5: r0 = socket$inet(0x2, 0x4200000000000001, 0x20000000000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0x9, 0x8, 0xfffffffffffffffc}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000000)=""/36, &(0x7f0000000100)=""/36, &(0x7f0000000140)=""/14, 0x3000}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 19:11:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1592.561831] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:07 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000800010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x27c) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1592.750176] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1592.799178] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:07 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000e81010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt(r0, 0x9, 0x0, &(0x7f00000000c0)="0a8cc0f10768d6e0cf9fec4a665796db6c5e9efd6415845846d0b62f7029d55f9248ec23f31654b2e51dd47d6c38e0589adbaefb1ef6ec31152d20cf65f39672e85388bd6a0b566d7818e7b8d14411917e3efcf02f97d80259b0c05cb5db2eba5c146110336a1e22ece305b64807757f88be44ba46be458f48f7cab4b84af7b8d06b1581", 0x84) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) 19:11:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1593.403758] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:07 executing program 6: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000410010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:08 executing program 5: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0xffffffae) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x800000, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1593.625170] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1593.702121] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:08 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000820000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000060010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=']) mount(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$void(r0, 0xc0045878) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:08 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0xfdfdffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:08 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1594.415544] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000380)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) [ 1594.496316] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:09 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="6d14dcbb040996780e7205d4695688afc25867ca3a2befd11747ba3372e5b0d8ff87b67d49bec232140f374f7c2b8546af88bbd3bde0c31bdbc402de93d305dfbe966a26e28417bf4182dc98a71771508d5024164ffade884132639b9f5f6a793a0ad5b5719091c35153e2c05d8cbbbac4fe31b7a9d6a60672de03259d654cd429ae993e65b35f3d3efd765c78d3cbfb70b82daa7f1ae663ba9becae9f", 0x9d, 0x11, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, &(0x7f0000000180)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x10) 19:11:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000008900000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x1}}}, 0x108) 19:11:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) connect$packet(r1, &(0x7f0000000100)={0x11, 0x2, r2, 0x1, 0x3}, 0x14) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xdbbd}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x7, 0x1, 0x1000, 0x80}, 0x98) [ 1594.749351] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1594.749351] [ 1594.801179] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1594.801179] 19:11:09 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x10001, @local, 0x8}, {0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x5}, 0x200, [0xfff, 0x0, 0x100000000, 0x3, 0x80, 0x9, 0x80000000, 0xc0]}, 0x5c) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 19:11:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020007fffffff00000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x80000, 0x1, 0x0, 0x0, @adapter={0x4, 0xfbfe, 0x0, 0x7f, 0x59fe489b}}]}) [ 1595.290884] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1595.290884] [ 1595.332648] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1595.332648] 19:11:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000001c0), &(0x7f0000000600)) r2 = dup2(r0, r1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000007a010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:10 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1595.479476] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1595.530671] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:10 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 19:11:10 executing program 6: socket$inet6(0xa, 0x1, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x32, 0x6}, &(0x7f0000000600)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xfffffffffffffffa, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000e82010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:10 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20}, {0x0, @broadcast}, 0x2, {0x2, 0x4e23, @rand_addr=0x4}, 'ip6gretap0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) [ 1595.894672] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1595.935557] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020002010010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x580, 0x0, 0x280, 0x140, 0x498, 0x498, 0x498, 0x4, &(0x7f0000000840), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @rand_addr=0x3b, @local, 0x4}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0xb}, @mac=@random="1f3b8399f949", @empty, @broadcast, 0xeb7f67369ad4359e, 0x1}}}, {{@arp={@empty, @local, 0xffffff00, 0x0, @mac=@random="3eebb28c4bdb", {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@dev={[], 0x18}, {[0xff, 0xff, 0xff, 0x0, 0xff]}, 0x17, 0x800, 0x6, 0x1ff, 0x100, 0x2, 'ipddp0\x00', 'vlan0\x00', {0x57b9d9c7d53056d0}, {0xff}, 0x0, 0x80}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:memory_device_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xffffff20) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e23}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x36025811c9794584, 0x0) recvfrom$inet6(r1, &(0x7f0000000740)=""/204, 0xcc, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x25d4f34f, @loopback, 0xfffffffeffffffff}, 0x1c) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x11b) 19:11:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:10 executing program 6: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = semget(0x2, 0x2, 0x4) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000400)=""/41) sendto$inet(r0, &(0x7f0000000100), 0xffffffffffffff5c, 0x200007fe, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0xffffffffffffff6c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x0, 0x2, [0xffffffffffffff56, 0x1]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000540)={r3, 0x1}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x9c) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d99a9dcd6881d692e53d55ca127"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0xa00000, 0x4, 0x7}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r4, 0x5, 0x1, 0x0, 0x7fffffff, 0x1, 0x4, 0x0, {r5, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x8, 0x8000, 0x8, 0x1}}, &(0x7f00000003c0)=0xb0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x7, 0x7, 0x9, 0x4}, {0x3, 0x1, 0xffff, 0x2}, {0x8d7000000000000, 0x4, 0x1, 0x8}]}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:11:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xbf00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:10 executing program 0: socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:10 executing program 5: r0 = socket$inet(0x2, 0x8, 0x1000006) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='selinuxuser@eth1vboxnet1eth0\x00', r1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1596.425516] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1596.509295] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:11 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="e3", 0x1, 0xfffffffffffffff8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) keyctl$chown(0x4, r1, r2, r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x200000, 0x0) write$cgroup_type(r4, &(0x7f00000002c0)='threaded\x00', 0x9) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:11:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000fc010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:11 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x100}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x800, 0xa, 0x9, 0x4, r1}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4b0, 0xffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0xc291}, 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r1 = dup2(r0, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1596.847124] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1596.914046] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:11 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x8, {0x600}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x509040, 0x16) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$sock_bt_hci(r3, 0xc00448f7, &(0x7f0000000180)="0224bce3679fded81d1c396fee65042f259f47fb63c621a68b8cfa706d2c7d9774bd57166e693edb930100f68fdd82ea8669a8c21421772b9e2b5408fcc5e5c74c2ab985dc0ee07292423f1b71d5724f3648bb2470f27d1c5d8559d270b4b6f6f79cea2aa593e8fa72babc788e47441c78b4d9b509abd53b16a550e90386da10f8561ced7fc78fbd82041d1d849339d16f8766e7bef56f81a382fdd6884076f78298e504ee76b98f0c190f3ccc90a9921d70f82143b0591c0e2b3b1152") setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000000000)="e15e2a40e316327e85ae3703ce6eed6e942fe0e9737f0922c11cf76e4f4b49562c2031495427932b2b3871c43ef0d6901122b8063299") setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:11:11 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0xfff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x103002, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000500010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:11 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000404000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1597.384659] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000180)=@llc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/141, 0x8d}], 0x3, &(0x7f00000003c0)=""/141, 0x8d, 0x200}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0xfffffffffffeffff}, &(0x7f0000000140)=0x8) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1597.443679] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:12 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/4096}, &(0x7f0000001180)=0x78) 19:11:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000040010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:12 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x41) sendto$inet(r1, &(0x7f0000000280), 0xb0, 0x200007fe, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x4, &(0x7f0000000000)=0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x121000, 0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="366d6a9936c789f077939961eccbd415dbcbf59b27767a91510342b560c488fc670d01ca9aa714d589c4d6cc3ccd7f6b33b1f24058707863cf2749e285b0db2b9dc4703c58106fedd28e9db2915a272621518760f515a9ba098eeb3e3ed2f2468f29a44a6e8a71c071d01c516ed5c57d523957f0a2676fb37f94e8667de91b0f4fc459b9c4fb33c51a944eb65429b267a3b29d5cf0c0a16f5bc827a479fbb0704fbb072afce7b02c432cf6ae60e26cf7968c716d370d", 0xb6, 0x200, 0x0, 0x3, r3}]) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000240)={0x9, 0x7, 0x9, 0x5, 'syz0\x00', 0xff}) [ 1597.645289] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1597.708981] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1597.835680] Unknown ioctl -1069525735 19:11:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x3ffd) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xffffffeffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)=""/151, &(0x7f0000000300)=0x97) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r2, 0xc, &(0x7f0000000100)={0x6, 0x1}, &(0x7f0000000180)) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x8800, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfae9, 0x8000) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x2) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x80000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d656e69782c6e6f6465766d61702c63615168653d6d6d61702c6e6f657874656e642c63616368653d667363616368652c61636365737b3d636c69656e742c64656275673d3078303030303030303030303030303037662c005710becf62be5ebcf6a480ce78c7505f3fe331d5d7e45f0069a9a850635146c074baf46e2076b5870b9bdc434e0b86b6edf12c86a35a16e24e8819dc849e9bb5"]) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:11:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 19:11:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000006c010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1597.994831] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1598.052505] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:12 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:12 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x8, [0xffffffff, 0x100000001, 0xfffffffffffffffa, 0x1ff, 0x4, 0x4, 0x7f, 0x8]}, 0x14) socketpair$inet6(0xa, 0x800, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x100000001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="c1000000c0cbe1a53b34dd720bca86d40f88da86221ce000fed251504ebf34c483d6b7fb44db1434753462c6bd3448ba310b264039b15d5cd2d022be4900328f70d35896f4fb6ea8ec1e5acbba632d76c71e4b86e662c9e046e9583cafcb997f2bac2e80b951de58520e49d7e27db0212983ffde253d5b4a7b57781dd2bbdcc56cf156f25f5eae74e5f3f1bc7064c690800b035c44e4bdabbfe9b3bb1083893d10942f728656d28493f1e45d4858e7201217c9e43b51ee986d485d6a4bb843880244371cf6"], &(0x7f0000000100)=0xc9) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x200}, 0xfffffffffffffda6) 19:11:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0xfffffffffffffe2e) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x2, 0x8) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)=0x2) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:12 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) r3 = shmget$private(0x0, 0x1000, 0xc04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000280)=""/166) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) read$FUSE(r4, &(0x7f0000001600), 0x1000) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:11:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000005010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1598.305594] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:12 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x101300) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x87, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e20, 0x1, 'fo\x00', 0xc, 0x0, 0x1a}, {@local, 0x4e23, 0x0, 0x4, 0x7, 0x401}}, 0x44) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000380), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c91cc001c22d3aeab557589e4d42eff7a472b82273409235cf90a93d4e291440f60b4499a6aa45e0c6d0d4740711854bf1ae5dc588055be9e814f618a05ab14b9f3620b0d62e9ae5e21efea7993f93d657a1fe968d9fadfd9214b36c8b940aefbb9a04a6ad7aa992132aa6594d2193f3597f38cbc50ff36b8974cbe5ee36abacc3173a4fff2efcaced26f5a729902373b", @ANYRES16=r2, @ANYBLOB="24012abd7000fddbdf25020000e513000300080005000000000008000800010000000c00010008004b007361103169b0a86edb607a01c5bf7e7200080005000060b30317a3db2fd617a3a1d309caf05f5deadae9e4fa412bfdfaa15841d2160e0f23636acb331607970cb00e98a1bbcbb164eefe31bf45535516cbc53cec4df2e41b006a30d3ae19f23f93593961435a64aecfe6d78ecbe3690be4c152829eaab6e19ab3c7109df9ff33ec84"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000380)=0x4, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000700)="24190f308986561b2ab368fc06ce0b859c81bfe4411c764c09e6bbf3d5fd67d0a87f72c8cc719a52f1c26489df4923c74a5699a64bf35797438bacf3a892ba7601164488fd3c8d2089bf00967aed451a23c02710c7f3ea4dd41bf8f44a1089c98062d0ff1cb0f712c197e56e5dc7b20c1d2a28b733adaa689baf579680fea13cfd67d5db2e86986eef1a92fb887c06ff4e3e01be59de5b8254d9c3d8a8d814ebb6c81d651e06edd690adc6e35b7a730938cda3845cc388abb6e9455462165f3489eac84de1d30de808f2759b5ebc501600a7546ed712135de8c6b3244901332e6908364f92e9485bfc314570f339f9131f9b8a553c16354d118c345c97ecad0f0790834b8d11d860fb205107824ddcd27199a3f305b786d1635535903110f2687ea71594c7d26185acbd30555d7a5c733eb6c6b33ae4c5596cd79fbc0a3508c24999b723abf607108ba697ba5692411997f100bd1bf77af39ba9a8697074cd1f3b6ef7f0c907a1e607746663ccf4a9aafc2bc765d136f02caab423a1bf5dfe6aa36ae8869a9d6776990e5357886fc86f0f6dc2477531bdd302957f2aa328bee4615f6f4708f5a11a37f08b55f1c2f01afa556080ce71b796446c0d41e4213af1d8dd918b3a70b3af65a5e82834c845c3943ceee0f0bd02e400ab9448a428acaf74eb823e53d2543f5ae2670b661b17423d8c6ba11ac50050f208e2540994f5c5c583898986fb5b88a32757f999833a9ff42290ee7b61c0f1533bb3ab41e4903736206989cb93836a3a6f39f7e2b3ae9c1f6041c85bd86f5a85fa206ec100fcbd4b769c65343e44f845f1bed88aef2f6d447d3a2c2c0ef949d2760610e87eae6533a6228a447212a4a603a6af377cfa6aa0fb53390c3f53abccc3673c6033c5512a6ef393d66b88e1ef0e3e03ebe22448c03c103379f135ab014602fbe943e5ca8653f6bf8402514793022cfa18e842e2a5896f373af343753530e5d5657a8c717dca547d31c584782d2ada6b08962d581b0094c439e5d84e5ebc3c6827d604422b69181d66892cf2ff93a71cc4ab28fbee75a9db1cae54a8191eba10e47b06ce0b5bf28aa7089b90feb9eb3ecf7c9d2d936808e64c0ea71271e87cba10f9b7c38abc6f71c1884ac8e4c8d7126791fb91df8a8e409bdff16b30ed9483f916e217a455b0d4b2a4336c8ccb6b13a8ba141b59d6ccd87b698c5685794e55c537ff36fec7c9c83d056ff46a237e895ec45120ffd69a2842cb4376f9dc93d8c029e57811b58f1b0c6ec5ff68fd18c5b6bda70308f1212e789bc5f5b88ecb4839f3a56de27860bc2a8102c0519800588d2a5c7dbc861112b6fef5ecf13c6b9c6ee6077e509d7a383edcd94aea9b93b2ca0e25889c442f25b421f22f2d51cb9ac80700d1c204862f61a05b725db113c4d7f04613b0eeb18d4e245c2e887ebe4a4583908a5a5ebcb2d1bdc88c99a473acd2d49500246bdcc0fc5e9ee0fd0bfad05f096d760a24f44357ffbe0cb85911b08255bd4c00789c602fc46d4a7479117b3a14416f7c61c8e112f01e4c4d98f9fa9e115820a410f6cb99b2f426756e1f74a89d80d99fe26053d4d7f22f7ddd73e7d8ffd7f3598eb54429fef6c2301ecebf6eeefb8840695f65bbc5357ee633d3768c6ec504d9537eeaf37cc84af9886bdac6b27af379a457566dbd940ae6776655386861e9eb1da48dca23cad53758a9e8d73c8f8f23de115584c9a29cf098eba3196850a879a4d687789287a60d52d7f4e68f6050f790d806913d03e13d6c54b77cec4fc10ed3380021964b5db860adfd08bdbbcc67a6ad35909f6bef30b479d73387653514ca95f6a61433febd7f79d9265f4512cb78e80e8580d7cb0ad87603668d6289769fe82d28304e1cc9f4c238878698e9b6189503e95bb76cde1c95d627630f2fe4263de58f6799376b08a8dd75a5e0637c969a9dd33543f2df60adeef146ca1342a7c9ac627ce96418f99783e190c261b0c90077cd73c7db8b073036516980da12ceaafb44ad30666c7ab6cd8c6e866a5a8927308e27e85415649c1395daced3c9467dd3c0f9131a8434cc2b8c379e5fb1b4e5e292391834f8b5e108ac285c8f66bd065321c8409c788370acccfee1625e08bfe2f53d92efa326188eb18d92684119be50a15632bc6f08b58daa225a32396f8f628224579df6b8b93a27653a775379b86433868c5c2c9c51e7bd3b06b6d28e02d4d2805e1e9a503144e74ce7e157fb9e9c2f78b0041cd6723e0a675f248dfdce4acd83a3accedcb89929ce9a48d767a5e42746893feb9c67db59b7ed6a8ea0d80ea358f432dcdfb47bb10ba604cf595696fb711640feda300df85fbcd53736eb21ac2088a2be2aaa1ad99edcc3da4d2a2f3b3abe3b549c836b4b92d8fc3bdbb0bdeb63fa7efe657555dee58f2a7b5054c1e3834d5dc334d945b015b36eb62a9951aab32990f7f81ca42b632bf7ee67f90ee089fb4852c7744ff7a8b09cf8c523c219564626d04cf9fc1a9203bbb5ddf3b25ebd878c770f01de412c800c0d996f2b0e36611933d65eedf50c0b464fdefc5a864df98ef5a0a19076b7f45d5564cf3d2ed5227cf5183f6a500de47f5aa8157b6659266c70724518d3489cde712f012fd93359ed71718def2b5a286df8c6fef0e019e15b0c7bdac156e49a02ee859c36849336b9f364739a63bfec023424977f22d757b1b255b8dbdaf71e717cb767dc17d33d211875de979a5ae833751f631351fb3d5196806332a1718892db7050138af2a79d57ea72aace5ac2bd2379c14024849a6587a743ebfabf480bc115ee28f726752cbe7023ca8b7b28f51680d7fbcd9418428a8f7cfd35edc5dbc0efdec782a764865083fec5b97783c36ba2c1677049bcb2a1861a866ba0fd5d44dd0e82d947129df1142296b80f004a528a6c30252150e54eff02ea25946cbdfb34c08e939f81f243d6a84eb8d3465b1b5cb8f0056e729b0065c40b69326f42881a8b0ab8f949ca938900f6a566b0def73080a2850cefc9f626fe3811868c62dc8828801438b6d714c5b60126905bee7ba7e9d0bc10f06256444c31d66976be9037f869ff81f5f201e49aa028c2d9756c1b549754c7d75af78bb4e8fefa7f763143693197f4a70b2e4f1a8c003cb95ffa8154785a14319239bec5cc61bcc5505efc87649918b776453c23f5f6a0c3186418acea990d677407ef7e1c2a4850602c01a1831b5636d66c35aa559c11b19f28ea1e1a0241e3b823d3ee49589174bf9f1b5fadca6ac8bb1816dcf96bfbcb78ae999ff10527a4d5d1ca59d3ab6c7db775ecdc17e34eb247de6aa42d4e508b5b24f543a1188fe7d4bab8269ff6686f3f203e1fd1464c9542e8f962de9e6ced251f7ccde9c83f85c1da946741222673be78675b8ed8e625239f5514f4441ccddc40d9e2afcd0ec6ab78b5552db91beeb1524ae517a6df8de57a95af9c3ebae8d167a6b25fc325ee666446fc6ee8c5a14ba56e4a2ecaaeb549cb847ae0432767783c2f344a4b7850b387081071709a3ea8e497b7d80b91ce25f6ad59288c4ebef975f57ba93bf0c96accfd17feec151240d0ccf4c4bdd72e80e9e5871976127cc5809014f37e58a8cc57cf674bc724a48c0f78fea90ca9de3ba3957ebca41a4f9738605b843165d04f635b02d6b8b4068c8d9cc296187b536346f595e54ed46293374ce7aaacfc903dd75a68d91b142b4c4a02bcc6487c163857b87edf17792bdbe2e2a68f1b03ff36c90280ce7e9bca32022efea630dadc76d5fc2b1f512371c648e49780b029cc7422a2403988b1dac9110068754e4f000a8220030e000076090d0b3aeb86187a8e4b3ea118cfaefd71ebf2b06a580cf081ef653da2d499a4987b2511d03bba77ac6fcabd8b66cf89440065b04983025064783e0a3602cb89b950ce6773e9fbf3246942de2f91020d4f316d5f7a2a31e2cb4e679d40c0c68b7f5b2463498b9531260b9dce8513f689ad09e9c1abe82664d71c725b688780839e0e64f159bd3e3c18f96861e079696bad93bfc5f49de9dc158b8650f8777bcc6ba43a865ba47fef5b53c412bf2d9f358e94d9d00300e2d3fd7381b004ebccb35437681cbf072c35390b4602d6718b38cbf6428f70fae3bf184da5fcebc9491378cca11f03cdd5b0ae412ed0d78ccfdae6b224fc7bcf6370abdec7cf8e8a140cfebe55a280053624bac3a9c0fa76703f97482cdc81371b5a6387ae1d3f85bdd31dedb8dc79aadecdca1656a760c848571c00d7b4eab661dd170183bf02a834acca1ee2157e574aaec81ace6bc352f07ddc0435e60d5277e16eb918df1dea7ad375f5e3cd23a0199747124bd58605611130eda5532df741defdab857d11ad7b6ec6dd3e340d2438d9ebe02ce3cc03c6296835c53cfcea8b6432c65391ed2e3763e0a30f6800e56653a913a3843d0e89bb9c3799fe4333d2ffd940dadd88d2aa65b51ea9cd4e5ba9af2accdacd77299059c3cc36122968e667d9cf8903a6f1c023712b52c6c1d6ca3222734f7cb4a0d0d6a1148e38387f2139f6a4d7141eabee62123299cea87860a0480547a1eba2b66156017b1beafd1b6e7c734188d774a24b2279eebbf78537522365087d9bdb4ff0d54beb5f0d538754a3c74176f883390e9f009858651383d500b941bd48b382fdbdcb865863ce585430e91edc6cc3c8fa8ae73f216c26cd052cac5a31aecbe7ebbf67a64e262f909a86ac4feda91fa9fa8d56fe758ee76eed4dc86810e4e137bf6e2b8e87b70f749d5229ea63e5988c807a369d3926f8ddb0cd75a58322f03c87944e02899331c832a210b1e34403990817c19ae28ad865f90a770e60f07f5c576f9fe055b575c080cb9d284354f7ad2e6727bd8fcf68a4fe614130697c105c6eb730f04763abb3e0bda8c448f32f6c3c7adb9beadcb76f7d8cbab69742bee07df7ec029ccf8a4b5d13cab54c8db8560a98bf1e3a231732557ac27517fa62ad6e4264095fb6da444f9fc861f346e5eec8bc776aef2de3033696d2971802c85e20c1c4fc1427c8842eb4c789d0475cc081bb126d065d9af21317daa91953dc035f42b7c4c0598880308ddbc99ab66c9e04d978441ff804fd5bb0dd54b0b5f276c5fa640be82cf0c586efd1876ab8188d01dd51400cde01bd3db82195aeb5d6156884b01dab8c9dd94c69e654c26d9dc4b17c771b2529acc90f44ede537e9a615caf6bc15c8dacbb762a490f5200d6bed2235add3ed79ed4eac60f880f4461a2115642d64ba795bccd7c4b4d21e98b4733d11c699f12dcafe5cf3602c02567deb097414d9de1eafb749bd66983f69ec23969ba1b951f8783a7529ee972c751d1119d7ced148a3097e0c2403c51c08ba861e99952bca36800c66c3ee44169417bb90dd4bb0a26f4f1cfada6de6b6c4f12b70525a93a48c8769cc33fb697473fdbe1782362e580479086f865962808df62826d93173bb4690daa39695586575065c744fc5d752728059a022f2534d33ef0116c693bd70fbafc5c53f318ecf1e3b154acc64a9a4da3756ee26d6fe01727ed1a04fc3d18ad15aa306f8c417038e5589831922c64155ba474fbc94da8f5693a0a221f432a4b049b9052b0ca0d901442b5c4ec3348bfcee8ba1d64b5b668dd29b9c4c01678ab3570b9a4c6938f50fd43b088b134f2d23f5fca16da5437106f08602ca0ff763b783a8c2c0ccc688bec64492357cf66ec6b9f906125231eb24234c7941955ea1b04808df4d556d422c65293d4e8add8f75e961c90f883738460154366b78368c5adfcca9b491042874a56e235c", 0x1000}, {&(0x7f0000001700)="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", 0x1000}], 0x2, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000300)=0x5) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000400), &(0x7f0000000440)=0x4) [ 1598.369512] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000000a010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:12 executing program 6: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r0, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) r3 = shmget$private(0x0, 0x1000, 0xc04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000280)=""/166) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, 0x8) read$FUSE(r4, &(0x7f0000001600), 0x1000) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:11:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0xfffffffffffffd61) r1 = dup2(r0, r0) ioctl$TCXONC(r1, 0x540a, 0x80) [ 1598.552836] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1598.600961] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) fcntl$setown(r0, 0x8, r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaea93044000080600d101080006040001040000000000ac1414aaffffffffffffffffffff000000000000000000000000"], &(0x7f0000000700)={0x0, 0x4, [0x2bb, 0xefd, 0xcd0, 0xe71]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x84050, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000006c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="5e3e64ad657e90e73e2a5c6957a6a3f5505a5f2e3931537fcda57c0a26f1ac6b601136de5af37c583fa89885623dd32eaf292ebb65475537d4942bb18f4e3ad1f482696a1e5266810aafe9056a9f67263478bb86f0b4944e0910dc6d74943e2c3f7176dafdb025ae252c9d6f1d431a751dd28653dcf4d4b4e5c46ffb442ddcb331eafdc5970f85991bf1ee37172092213462007a543f6b3ab7fab3293270d8854fbc27f4e8", 0xa5}, {&(0x7f0000000200)="62a849637bc074d39f0e6fb09a22f9b355ada72fa4c88efa23d1154cfd8f2300a14faf558cf0024b247843465dc81b118a3a2acd", 0x34}, {&(0x7f0000000240)="678bba0b1932dbb38d20bd5d883292d225fdac7fa652a226a5d409fd30020a5b11a491fcb9cc0b0ec2ea6a722e770b9a206429143c3d014a65724988bce72075e1f1b89da4ca", 0x46}, {&(0x7f00000002c0)="51ce078cc1caf5c73850f58f7847bedd1fe195413d64adab749cefe42820ae1620db55f5a485755678a7b84a2b6fca394891b08d79706abf35038c464a993b0c7028da6b15949272d00544baf662546aa51108f4c94d1ad65959269423a099d0c7d7675f4ad9c54e952afc0813884f52e908e129c7e1273627c91791914d0959d3072915eb79d62c180e45448db3fc1ba77d65960de62c7a5f42063d97990a4ffdd10c", 0xa3}], 0x4, &(0x7f0000000500)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20}, 0x80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000580)={0x4, 0x80000001, 0x0, 0x0, 0x0, [], [], [], 0x4, 0x3}) 19:11:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020004c00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0xffffff94, 0x200007fe, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fsync(r0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1598.805482] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1598.886729] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:13 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:11:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:13 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, 0x8) 19:11:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020006800010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:13 executing program 5: r0 = socket$inet(0x2, 0x1, 0x4000000000000000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x0, 0x3, 0xf9, 0x6, 'syz1\x00', 0x81}, 0x0, [0x8, 0x2, 0x5, 0x4, 0x88d, 0x5, 0x3, 0x5, 0x9, 0xf0a, 0x0, 0x2, 0x3, 0x8001, 0x7, 0x7ff, 0xff, 0x3, 0x7ff, 0x0, 0x1, 0x9, 0x80000000, 0x38, 0x6, 0x3, 0xb37, 0x401, 0x7, 0xf8e, 0x3, 0xb01, 0x4, 0x8, 0x28, 0x5, 0x9, 0x50000, 0x7, 0x7, 0x3ff, 0xbba2, 0x100, 0x2, 0x7f, 0x4, 0x8, 0x7, 0x6b, 0x8, 0x3ff, 0x2, 0x7, 0xfffffffffffffff8, 0x100000000, 0x7, 0x8, 0x3c, 0x100, 0x0, 0xdaa6, 0xfffffffeffffffff, 0x3, 0x7ff, 0x0, 0x3ff, 0xd9b, 0x800, 0x9, 0x4, 0x0, 0x54b07383, 0x81, 0x3ff, 0x8, 0xfffffffffffffffb, 0x20, 0x2, 0xf1, 0x10000, 0x5, 0x200, 0x1, 0x6, 0x10000000000, 0x7, 0x0, 0x0, 0x1, 0x9, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x16bb, 0x4, 0x1ff, 0x1, 0x5, 0xf7f5, 0x7f, 0x2, 0x7, 0xb76f, 0xfffffffffffffff7, 0x100, 0xfffffffffffffff7, 0x68, 0xf04, 0x100000001, 0x2, 0x1, 0x6, 0x1, 0x80, 0x7, 0x6, 0x0, 0x10001, 0x9, 0x16d4, 0x401, 0x6, 0x7, 0x70d, 0x7, 0x4], {r1, r2+10000000}}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = dup2(r0, r0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000) 19:11:13 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)="766574683100000000ffffffffffef00", 0xffffffffffffff9c}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)="0f75a9af2602fe28d8fa234f99c777a6def828eafb48998d8c4a77603ace7f5c8b798a9c19b59c8a156d8da182f10d35c89add3269d178d4eb705e58116d6eae6a06ee2d942f7f92901bdfcdb5f9941d1b984a43b9c0da8b593e2582cba3eaba0929a9ebf88f0287fa882b514ff95b5cb2a02528335d6cd7629e5777bf0fc5f879e6b477aea0b2d473aa04cd04614e386cb42941e97e83f105465a2752799bbbfdc6ad0ddb234c303957fa69e052dc2bbea39a202fb43289bf63292f66f24206ba1d3f5ad4b4835732ffe49f1376bddb292c28953ab27d99bdef03b2f188a9c4345fe86fd22ab1af0d18b586529b30d14856c3", &(0x7f00000000c0)="349ccab52633bfa05c29c67f29410d664d45d183db34ee7b17c03833674580a9cb88785d26fa018587794c8fa78949c11bf61b567622ebb13576063827a638938fe67316716286c10d4f3ac1c43b11f1f05a850d8b95bf0aafc4a165a67c7839abb234814cd74828dde9dcf160eae388ddc88729f187ee0be794d9b797afc33e", 0x3}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:11:13 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1599.340618] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:13 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:13 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x0, 0x1, 0x8, 0x0, 0xa0a0000000000000, 0xffffffffffffb2fd, 0x7, r1}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r3 = msgget(0x2, 0x1) msgctl$IPC_RMID(r3, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r4 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x201, 0x6, 0x4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0xfffffffffffffffa}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={r5, 0x7}, 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e5361833e5f"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x0) 19:11:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x800) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x2f0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) [ 1599.409723] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020006000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/182) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="48e88b854ac47379c951", 0xffffffffffffffd3, 0x8000, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8000, [0x0, 0x3e8]}, 0xff59) 19:11:14 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0x8000000000000000, 0x2000, 0x0, 0x0, 0x18}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8b1, 0x40002) ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x8, 0x0, 0x88, &(0x7f0000000180)="44ed99c721301172fcd36b0a72cbeef8d8aa33d87359196fde767e36d29d420a2bc15fa35990da2b42d9c1e1bc7523fa179e8890596016a33c93d1ea083fd965ff047c0ac399a83e1d221add81f2975ee91416f6b1669e8adf0eab80875b6fef7aa7255a684b4dc1f84e3f13c01af1eff692506d2e0bdd908caa8152106e4edacc153381293c8bc3"}) [ 1599.644414] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) io_setup(0x2, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf, 0x5, r0, &(0x7f0000000100)="a12628bf214edcb3b60adf47ad09c9e467afb648f6cb237c7584b9378b98630c816d493c4e8f09dd4a469ad83f7d7ae122ec71ce88dc6768c9f9c97bf8553d4968ae975e8ca14a7468a89916bc09bbf733d5c9", 0x53, 0x0, 0x0, 0x0, r2}, &(0x7f0000000200)) [ 1599.735367] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:14 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xd4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) 19:11:14 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000900010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:14 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="60282328b81995d2cde9729cab478164c9866f25f31a8259e7d744306c0ac0f943b671afd19c663399", 0x29, 0xc0, &(0x7f0000000000)={0x2, 0x4e20, @empty, [0x0, 0x3e8]}, 0x10) 19:11:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1600.126399] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1600.163277] FAULT_INJECTION: forcing a failure. [ 1600.163277] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.175041] CPU: 1 PID: 12596 Comm: syz-executor6 Not tainted 4.19.0-rc2-next-20180903+ #54 [ 1600.183552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.192902] Call Trace: [ 1600.195483] dump_stack+0x1c9/0x2b4 [ 1600.199118] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1600.204313] should_fail.cold.4+0xa/0x11 [ 1600.208395] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1600.213528] ? fib_insert_alias+0x1200/0x1200 [ 1600.218045] ? print_usage_bug+0xc0/0xc0 [ 1600.222138] ? kasan_slab_alloc+0x12/0x20 [ 1600.226302] ? d_alloc+0x96/0x380 [ 1600.229786] ? print_usage_bug+0xc0/0xc0 [ 1600.233886] ? graph_lock+0x170/0x170 [ 1600.237759] ? __lock_acquire+0x7fc/0x5020 [ 1600.242106] ? zap_class+0x740/0x740 [ 1600.246040] ? __lock_is_held+0xb5/0x140 [ 1600.250157] __should_failslab+0x124/0x180 [ 1600.254417] should_failslab+0x9/0x14 [ 1600.258270] kmem_cache_alloc+0x47/0x710 [ 1600.262357] ? ip_mc_drop_socket+0x270/0x270 [ 1600.266795] dst_alloc+0xbb/0x1d0 [ 1600.270372] rt_dst_alloc+0x102/0x520 19:11:14 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1600.274191] ? fnhe_flush_routes+0x480/0x480 [ 1600.279316] ? __lock_is_held+0xb5/0x140 [ 1600.283425] ip_route_output_key_hash_rcu+0xa5b/0x3500 [ 1600.288739] ? ip_route_input_noref+0x270/0x270 [ 1600.293436] ? mark_held_locks+0x160/0x160 [ 1600.297705] ? mark_held_locks+0x160/0x160 [ 1600.301958] ? lock_acquire+0x1e4/0x4f0 [ 1600.306039] ? ip_route_output_key_hash+0x1ab/0x3b0 [ 1600.311245] ? __mutex_lock+0x6d0/0x1700 [ 1600.315335] ? kasan_check_read+0x11/0x20 [ 1600.319505] ? rcu_is_watching+0x8c/0x150 19:11:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000000c0)="51fa1fbeb10daf6640a2fa00da6817fe7d0984003662f376cf8b0016b8187b696c4d270caf36de285b012d41659b858f2027aa6147c6ba4afc2bf7eb82fd3912c0a779eac84c6ceb18d7a3b6d5f38fca1e67c49f333894431e361ec70b1829a82009197a28fbfef36926", 0x6a, 0x20000010, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1600.323675] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1600.328370] ? zap_class+0x740/0x740 [ 1600.332122] ip_route_output_key_hash+0x242/0x3b0 [ 1600.336977] ? ip_route_output_key_hash_rcu+0x3500/0x3500 [ 1600.342536] ? graph_lock+0x170/0x170 [ 1600.346373] ip_route_output_flow+0x28/0xc0 [ 1600.350720] ip_mc_find_dev+0x331/0x520 [ 1600.354749] ? igmp_mc_seq_show+0xb20/0xb20 [ 1600.359105] __ip_mc_join_group+0x142/0x6d0 [ 1600.363435] ? lock_sock_nested+0xe7/0x120 [ 1600.367683] ? ip_mc_inc_group+0x30/0x30 [ 1600.371774] ip_mc_join_group_ssm+0x25/0x30 [ 1600.376108] do_ip_setsockopt.isra.13+0x3916/0x3e70 [ 1600.381143] ? ip_ra_control+0x640/0x640 [ 1600.385432] ? graph_lock+0x170/0x170 [ 1600.389422] ? graph_lock+0x170/0x170 [ 1600.393262] ? find_held_lock+0x36/0x1c0 [ 1600.397383] ? rcu_is_watching+0x8c/0x150 [ 1600.401780] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1600.406487] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1600.412147] ? aa_label_sk_perm+0x45b/0x8d0 [ 1600.416486] ? aa_profile_af_perm+0x430/0x430 [ 1600.421082] ? debug_lockdep_rcu_enabled+0x77/0x90 19:11:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x7f) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000580)={0xfff, 0x1, 0x2001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'teql0\x00'}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000300)={0x7b, 0x0, [0x0, 0x7, 0x100000001, 0xfffffffffffffffa]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@local, @ipv4={[], [], @multicast2}, @mcast2, 0x2, 0x3, 0x100000000, 0x400, 0x7ea, 0x8, r3}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mq_timedreceive(r1, &(0x7f0000000200)=""/253, 0xfd, 0xfffffffffffffff9, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') sendto$inet(r0, &(0x7f0000000140), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x80000000000000, @empty, [0x0, 0x3e8]}, 0x3) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000100)) ioctl$int_in(r1, 0x0, &(0x7f00000001c0)=0xcd) [ 1600.426030] ip_setsockopt+0x4c/0x140 [ 1600.429873] udp_setsockopt+0x62/0xa0 [ 1600.433682] ipv6_setsockopt+0x149/0x170 [ 1600.437757] tcp_setsockopt+0x93/0xe0 [ 1600.441575] sock_common_setsockopt+0x9a/0xe0 [ 1600.446120] __sys_setsockopt+0x1c5/0x3b0 [ 1600.450285] ? kernel_accept+0x310/0x310 [ 1600.454418] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1600.459202] ? trace_hardirqs_on+0xbd/0x2c0 [ 1600.463540] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1600.468920] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1600.474052] __x64_sys_setsockopt+0xbe/0x150 [ 1600.478507] do_syscall_64+0x1b9/0x820 [ 1600.482410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1600.487790] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1600.492745] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1600.497780] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1600.502811] ? recalc_sigpending_tsk+0x180/0x180 [ 1600.507588] ? kasan_check_write+0x14/0x20 [ 1600.511845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1600.516729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1600.521924] RIP: 0033:0x457099 19:11:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000002c0)={0x5, 0xfffffffffffff04a, 0x3}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000040)=0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=r3, @ANYBLOB="020027bd7000fedbdf250e000000080004000700000099840eca22368040adec4ef51426b57f2410c6cb2b83f9794fc78ae1f1430b580fc7bfa86a175e77fc152428edc9e00a3f1acb46a5b7a663e611fef1c368f6f83d059a4dc0f47da0b52c305e8798434642f5e09ea2fad5399f8edf651ede18346b58bd80110e5cbdf272833671eb63e269e0319876f0cce40cb4d64fea3d436cb5fbb14888dd08472cfea1883d1bdcb8ff89a55d000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) [ 1600.525131] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1600.544066] RSP: 002b:00007f278f102c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1600.551789] RAX: ffffffffffffffda RBX: 00007f278f1036d4 RCX: 0000000000457099 [ 1600.559084] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000004 [ 1600.566453] RBP: 00000000009300a0 R08: 0000000000000108 R09: 0000000000000000 19:11:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x88000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1600.573733] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000006 [ 1600.581025] R13: 00000000004d54f0 R14: 00000000004c04b8 R15: 0000000000000000 [ 1600.624620] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:15 executing program 6 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x1100, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=""/73, 0x49) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101000, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000280), 0x4) sendto$inet(r0, &(0x7f0000000300)="ec6c6aa50e260916753a5359eacff8e1d8acbc4a2fc8c7a6ee539a934bf301573e7ddfae6ffc10bdd5ae2021f856aa85648df6fcd92c6c27ffca66659bfb8135a7732ff0b8eb8b4d4e0ae1ba026bc35c922e73afdf7ddf378067b9a74427004e0864b7773bcff1e2aa35b9be8bc0c6aab98043b7ede5d21a3ecb8ef840b7360aeabb87544e00332d6f94454991e8d921b85eeea9adce2f2d6f3f963744aeaf1ca3b3871fb5c99afabec703fe4ec213f4fe40c1649d5c237833", 0x0, 0x140001, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0xfcf5) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x7) sendto$inet(r0, &(0x7f00000000c0)="912c600cdefaea444fe0b4a0d7830132ce33df2caf8406ef92815d19ca3a14249f7a0a581ca1c148a5bd25be3d36971ac307e25d3c6bfd65824ff42d590509563faf6cc80ccc70b2bf67075d93a90cac2a305eefff7838d99934e3e1230f27476570c406cd59b1f4bf66db7b79b782e22f71528d640ed58a138343b70244c70a2a3f1d9cb202a3accb9ac5d1946dbdc57577b4817a812b0d1dd669d9ed7bb55f371b468671a2d34569607cf168bdde8d61cf84f00853f8fd180a10b93fd95bf6666757a9fca5899ee979d5e30000000000000000000000000000006e57e4104df85fadae02f46350931ebb2b6607c5e1f4d99bea8758e5ceb7a200c1e60ea37e824fee490915bab4b8de5a78110c324bbdcf432bf223077d805ffb9ebcb73bf64c6298bf3488b437881136631c82bb96d58c347079ba451def80fd1bf4df14d2903d5eaec9a11b1aa5", 0xfffffffffffffe4e, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote, [0x0, 0x3e8]}, 0x5bee47e5) r2 = getpgrp(0xffffffffffffffff) sched_getscheduler(r2) 19:11:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000000500000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1600.826555] FAULT_INJECTION: forcing a failure. [ 1600.826555] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.837963] CPU: 1 PID: 12652 Comm: syz-executor6 Not tainted 4.19.0-rc2-next-20180903+ #54 [ 1600.846481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1600.855872] Call Trace: [ 1600.858495] dump_stack+0x1c9/0x2b4 [ 1600.862148] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1600.867378] ? perf_trace_lock+0xde/0x920 [ 1600.871578] should_fail.cold.4+0xa/0x11 19:11:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x6, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1600.875670] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1600.880808] ? mark_held_locks+0xc9/0x160 [ 1600.884991] ? __call_rcu.constprop.68+0x3bc/0xb30 [ 1600.889941] ? __call_rcu.constprop.68+0x3bc/0xb30 [ 1600.894888] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1600.899490] ? graph_lock+0x170/0x170 [ 1600.903313] ? rcu_is_watching+0x8c/0x150 [ 1600.907478] ? call_rcu_sched+0x12/0x20 [ 1600.911470] ? find_held_lock+0x36/0x1c0 [ 1600.915554] ? __lock_is_held+0xb5/0x140 [ 1600.919647] ? check_same_owner+0x340/0x340 19:11:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0xffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1b1502, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0)) init_module(&(0x7f0000000100)='/dev/rtc0\x00', 0xa, &(0x7f0000000140)='/dev/rtc0\x00') [ 1600.924000] ? ip_route_output_key_hash+0x29b/0x3b0 [ 1600.928734] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1600.928734] [ 1600.929030] ? rcu_note_context_switch+0x680/0x680 [ 1600.929070] __should_failslab+0x124/0x180 [ 1600.929101] should_failslab+0x9/0x14 [ 1600.949223] __kmalloc+0x2b2/0x720 [ 1600.952784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1600.958346] ? sock_kmalloc+0x156/0x1f0 [ 1600.962343] sock_kmalloc+0x156/0x1f0 [ 1600.966174] ? __sk_mem_schedule+0xe0/0xe0 [ 1600.970440] __ip_mc_join_group+0x3ab/0x6d0 19:11:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x1100000000000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1600.974870] ? ip_mc_inc_group+0x30/0x30 [ 1600.978954] ip_mc_join_group_ssm+0x25/0x30 [ 1600.983291] do_ip_setsockopt.isra.13+0x3916/0x3e70 [ 1600.988325] ? ip_ra_control+0x640/0x640 [ 1600.992395] ? graph_lock+0x170/0x170 [ 1600.996206] ? graph_lock+0x170/0x170 [ 1601.000049] ? find_held_lock+0x36/0x1c0 [ 1601.004162] ? rcu_is_watching+0x8c/0x150 [ 1601.008323] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1601.013021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1601.018589] ? aa_label_sk_perm+0x45b/0x8d0 [ 1601.022932] ? aa_profile_af_perm+0x430/0x430 [ 1601.027507] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1601.032459] ip_setsockopt+0x4c/0x140 [ 1601.036281] udp_setsockopt+0x62/0xa0 [ 1601.040111] ipv6_setsockopt+0x149/0x170 [ 1601.044192] tcp_setsockopt+0x93/0xe0 [ 1601.048023] sock_common_setsockopt+0x9a/0xe0 [ 1601.052557] __sys_setsockopt+0x1c5/0x3b0 [ 1601.056721] ? kernel_accept+0x310/0x310 [ 1601.060815] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1601.065413] ? trace_hardirqs_on+0xbd/0x2c0 [ 1601.069772] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1601.075160] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1601.080289] __x64_sys_setsockopt+0xbe/0x150 [ 1601.085165] do_syscall_64+0x1b9/0x820 [ 1601.089079] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1601.094454] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1601.099399] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1601.104436] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1601.109465] ? recalc_sigpending_tsk+0x180/0x180 [ 1601.114262] ? kasan_check_write+0x14/0x20 [ 1601.118520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1601.123395] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1601.128591] RIP: 0033:0x457099 [ 1601.131796] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1601.151274] RSP: 002b:00007f278f102c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1601.159225] RAX: ffffffffffffffda RBX: 00007f278f1036d4 RCX: 0000000000457099 [ 1601.166977] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000004 [ 1601.174255] RBP: 00000000009300a0 R08: 0000000000000108 R09: 0000000000000000 [ 1601.181539] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000006 [ 1601.188817] R13: 00000000004d54f0 R14: 00000000004c04b8 R15: 0000000000000001 [ 1601.268631] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1601.268631] 19:11:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x6000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020007a00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240), 0x4) r1 = accept(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x80) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r0}) bind$can_raw(r1, &(0x7f0000000280)={0x1d, r2}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x4000000800) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000002c0)=0x7fff, 0x3c4) 19:11:16 executing program 6 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x600000000000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:16 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1601.728439] FAULT_INJECTION: forcing a failure. [ 1601.728439] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.740070] CPU: 1 PID: 12718 Comm: syz-executor6 Not tainted 4.19.0-rc2-next-20180903+ #54 [ 1601.748580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.757934] Call Trace: [ 1601.760542] dump_stack+0x1c9/0x2b4 [ 1601.764207] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1601.769758] ? perf_trace_lock+0xde/0x920 [ 1601.773942] should_fail.cold.4+0xa/0x11 [ 1601.776655] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1601.778033] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1601.778068] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1601.778100] ? is_bpf_text_address+0xd7/0x170 [ 1601.778119] ? graph_lock+0x170/0x170 [ 1601.778139] ? __kernel_text_address+0xd/0x40 [ 1601.778160] ? find_held_lock+0x36/0x1c0 [ 1601.813188] ? __lock_is_held+0xb5/0x140 [ 1601.817275] ? check_same_owner+0x340/0x340 [ 1601.821599] ? tcp_setsockopt+0x93/0xe0 [ 1601.825580] ? sock_common_setsockopt+0x9a/0xe0 [ 1601.830255] ? __sys_setsockopt+0x1c5/0x3b0 [ 1601.834584] ? rcu_note_context_switch+0x680/0x680 [ 1601.839545] __should_failslab+0x124/0x180 [ 1601.843796] should_failslab+0x9/0x14 [ 1601.847614] kmem_cache_alloc_trace+0x2b5/0x730 [ 1601.852754] __ip_mc_inc_group+0x2fa/0xe10 [ 1601.857014] ? ip_mc_add_src+0x1220/0x1220 [ 1601.861435] ? rcu_read_lock_sched_held+0x108/0x120 [ 1601.866706] ? __kmalloc+0x594/0x720 [ 1601.870448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 19:11:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20048014, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1601.876116] ? sock_kmalloc+0x156/0x1f0 [ 1601.880117] ? sock_kmalloc+0x182/0x1f0 [ 1601.884108] ? __sk_mem_schedule+0xe0/0xe0 [ 1601.888481] __ip_mc_join_group+0x4f4/0x6d0 [ 1601.892827] ? ip_mc_inc_group+0x30/0x30 [ 1601.897170] ip_mc_join_group_ssm+0x25/0x30 [ 1601.901517] do_ip_setsockopt.isra.13+0x3916/0x3e70 [ 1601.906662] ? ip_ra_control+0x640/0x640 [ 1601.910843] ? graph_lock+0x170/0x170 [ 1601.914655] ? graph_lock+0x170/0x170 [ 1601.918477] ? find_held_lock+0x36/0x1c0 [ 1601.922575] ? rcu_is_watching+0x8c/0x150 [ 1601.926747] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1601.931604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1601.937366] ? aa_label_sk_perm+0x45b/0x8d0 [ 1601.941720] ? aa_profile_af_perm+0x430/0x430 [ 1601.946267] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1601.951236] ip_setsockopt+0x4c/0x140 [ 1601.955070] udp_setsockopt+0x62/0xa0 [ 1601.958892] ipv6_setsockopt+0x149/0x170 [ 1601.962971] tcp_setsockopt+0x93/0xe0 [ 1601.966792] sock_common_setsockopt+0x9a/0xe0 [ 1601.971307] __sys_setsockopt+0x1c5/0x3b0 [ 1601.975469] ? kernel_accept+0x310/0x310 19:11:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x18a, 0x80, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1601.979574] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1601.984172] ? trace_hardirqs_on+0xbd/0x2c0 [ 1601.988728] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1601.994212] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1601.999339] __x64_sys_setsockopt+0xbe/0x150 [ 1602.003781] do_syscall_64+0x1b9/0x820 [ 1602.007680] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1602.013091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1602.018092] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1602.023128] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1602.028162] ? recalc_sigpending_tsk+0x180/0x180 [ 1602.032928] ? kasan_check_write+0x14/0x20 [ 1602.037183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1602.042093] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1602.047294] RIP: 0033:0x457099 [ 1602.050527] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1602.069437] RSP: 002b:00007f278f102c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 19:11:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x8800, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:16 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x807fe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xc}, 0x9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e23, 0x45c, @empty, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in={0x2, 0x4e20, @broadcast}], 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1602.077164] RAX: ffffffffffffffda RBX: 00007f278f1036d4 RCX: 0000000000457099 [ 1602.084442] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000004 [ 1602.091723] RBP: 00000000009300a0 R08: 0000000000000108 R09: 0000000000000000 [ 1602.099011] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000006 [ 1602.106308] R13: 00000000004d54f0 R14: 00000000004c04b8 R15: 0000000000000002 19:11:16 executing program 6 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1602.158732] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x1000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1602.237335] FAULT_INJECTION: forcing a failure. [ 1602.237335] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.248725] CPU: 1 PID: 12778 Comm: syz-executor6 Not tainted 4.19.0-rc2-next-20180903+ #54 [ 1602.257236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.266597] Call Trace: [ 1602.269218] dump_stack+0x1c9/0x2b4 [ 1602.272908] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1602.278122] ? perf_trace_lock+0xde/0x920 [ 1602.282288] should_fail.cold.4+0xa/0x11 [ 1602.286384] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1602.291505] ? igmp_ifc_start_timer+0xb0/0xb0 [ 1602.296025] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1602.301277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1602.306840] ? graph_lock+0x170/0x170 [ 1602.310667] ? find_held_lock+0x36/0x1c0 [ 1602.314759] ? __lock_is_held+0xb5/0x140 [ 1602.318850] ? check_same_owner+0x340/0x340 [ 1602.323188] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1602.327878] ? rcu_note_context_switch+0x680/0x680 [ 1602.332836] __should_failslab+0x124/0x180 19:11:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000002d010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1602.337105] should_failslab+0x9/0x14 [ 1602.340933] __kmalloc+0x2b2/0x720 [ 1602.344493] ? rcu_read_lock_sched_held+0x108/0x120 [ 1602.349523] ? sock_kmalloc+0x156/0x1f0 [ 1602.353522] sock_kmalloc+0x156/0x1f0 [ 1602.357353] ? __sk_mem_schedule+0xe0/0xe0 [ 1602.361609] ip_mc_source+0xf85/0x12d0 [ 1602.365503] ? __ip_mc_join_group+0x4f9/0x6d0 [ 1602.370010] ? ip_mc_join_group_ssm+0x30/0x30 [ 1602.374569] do_ip_setsockopt.isra.13+0x32bb/0x3e70 [ 1602.379597] ? ip_ra_control+0x640/0x640 [ 1602.383665] ? graph_lock+0x170/0x170 [ 1602.387476] ? graph_lock+0x170/0x170 [ 1602.391296] ? find_held_lock+0x36/0x1c0 [ 1602.395529] ? rcu_is_watching+0x8c/0x150 [ 1602.399963] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1602.404659] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1602.410204] ? aa_label_sk_perm+0x45b/0x8d0 [ 1602.414644] ? aa_profile_af_perm+0x430/0x430 [ 1602.419189] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1602.424130] ip_setsockopt+0x4c/0x140 [ 1602.427938] udp_setsockopt+0x62/0xa0 [ 1602.431974] ipv6_setsockopt+0x149/0x170 [ 1602.436047] tcp_setsockopt+0x93/0xe0 [ 1602.439879] sock_common_setsockopt+0x9a/0xe0 [ 1602.444387] __sys_setsockopt+0x1c5/0x3b0 [ 1602.448553] ? kernel_accept+0x310/0x310 [ 1602.453022] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1602.457619] ? trace_hardirqs_on+0xbd/0x2c0 [ 1602.462123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1602.467493] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1602.472729] __x64_sys_setsockopt+0xbe/0x150 [ 1602.477188] do_syscall_64+0x1b9/0x820 [ 1602.481443] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1602.486826] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1602.491756] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1602.496787] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1602.501804] ? recalc_sigpending_tsk+0x180/0x180 [ 1602.506742] ? kasan_check_write+0x14/0x20 [ 1602.510995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1602.515855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1602.521055] RIP: 0033:0x457099 [ 1602.524263] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1602.543164] RSP: 002b:00007f278f102c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1602.550881] RAX: ffffffffffffffda RBX: 00007f278f1036d4 RCX: 0000000000457099 [ 1602.558165] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000004 [ 1602.565433] RBP: 00000000009300a0 R08: 0000000000000108 R09: 0000000000000000 [ 1602.572707] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000006 [ 1602.579973] R13: 00000000004d54f0 R14: 00000000004c04b8 R15: 0000000000000003 19:11:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x11, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:17 executing program 5: r0 = socket$inet(0x2, 0x4080000000080001, 0xfffd) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:17 executing program 6 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x100000000000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1602.790926] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1602.844440] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x51bc3a93, 0x187001) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x3c, @rand_addr=0x8, 0x4e22, 0x0, 'sed\x00', 0x10, 0x13b03fbf, 0xa}, 0x2c) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000180), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x10) 19:11:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x8800000000000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000007010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfffffffe]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:17 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x88, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1603.062581] IPVS: set_ctl: invalid protocol: 60 0.0.0.8:20002 [ 1603.078097] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1603.108777] IPVS: set_ctl: invalid protocol: 60 0.0.0.8:20002 [ 1603.111289] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x300000000000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x229ef339b772cf22) sendto$inet(r0, &(0x7f0000000040), 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x0, @multicast1, [0x0, 0x3e8]}, 0x254) creat(&(0x7f0000000040)='./file0\x00', 0x2d) 19:11:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x11000000, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020001400010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x600, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="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", 0x1000, 0x10, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000010c0)={@dev}, &(0x7f0000001100)=0x14) sendto$inet(r0, &(0x7f0000001180)="f541e70ec40b08cfd243eda05a91eb451f13ec6f", 0x14, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x10) 19:11:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0xffffffa4, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1603.306378] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1603.411634] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2480, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r1}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000200)=0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x88e, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @local}, 0x4, 0xffff, 0xffffffffffff7fff, 0x6, 0x100000000, &(0x7f0000000040)='veth0_to_bridge\x00', 0x3, 0x3, 0x5}) 19:11:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x1000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x5, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000200010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x50) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000280)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) mq_unlink(&(0x7f0000000140)='#%trusted&\\*\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200000, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x6617}, @void, @ipv4={{0x26, 0x4, 0xfffffffffffffffe, 0x7fffffff, 0xda, 0x66, 0x20, 0x5, 0x5e, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, {[@end, @noop, @cipso={0x86, 0x32, 0x80000000, [{0x0, 0xc, "1c96074385ddf049be05"}, {0x7, 0xa, "41c01a8680a15725"}, {0x2, 0xd, "09467f6e94614f13f2a6d1"}, {0x7, 0x9, "990ba27b4c2bb4"}]}, @rr={0x7, 0x27, 0xc8, [@local, @multicast2, @loopback, @broadcast, @multicast1, @loopback, @rand_addr=0x40, @broadcast, @empty]}, @generic={0xdc, 0x6, "a7fa66f1"}, @timestamp={0x44, 0x14, 0x6, 0x3, 0x0, [{[@loopback], 0x81}, {[@empty], 0x6bcc}]}, @noop, @end, @ssrr={0x89, 0xb, 0x9, [@empty, @broadcast]}]}}, @dccp={{0x4e21, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x7, "ef0326", 0x5, "0e6ca7"}, "9277325f88817081889d5b993c2159ff11ff0cd72b0b7e106a3618578a020684e6cd70a20c339fbd2722808f3b2718a08e5f"}}}, 0xde) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000002c0)) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:18 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000824000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1603.928837] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x32, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1603.972926] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0xa4ffffff00000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x11, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200000ce010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000005c0)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000640)={{0x100, r2, r3, r4, r5, 0x1, 0x68b}, 0x4, 0x4, 0x4, 0x9, r6, r7, 0x9}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x8800000000000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1604.229327] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 1604.238659] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x600000000000000, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1604.293555] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1604.354442] kernel msg: ebtables bug: please report to author: Wrong nr of counters 19:11:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000068010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x2000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x6000000, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x105300) connect(r1, &(0x7f0000000140)=@generic={0x8, "2a68550becf96c9d1f674e5977d73deec417db2d8c415865838da1f68778725c156e7553790419c7e7924d2742704c5eb7e1b17d77b6c1b4d41d4c6f84a777c146e4fab81aab0e77d8ff411cc464dd50c252e1f4cd6487492fb783ff52262d642547d1dfe0a0eaa7a49ba9b9ddb4343a608073d3776a6c405be7673f98bd"}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x80000001, 0x4, 0x8, {}, 0xfffffffffffffff8, 0x3ff}) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x88000000, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1604.590845] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1604.657356] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x1100, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x14, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000200000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:19 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)=""/102) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000260000012dbd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="effff3ff1800000000dec73d00000000090e00c4b9dd88f6c62ceaed75d7718a2c000a0004000a0004000a0004000a0004000a00"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x44040) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:19 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff4000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x88, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x2000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x1100000000000000, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1605.067436] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x11000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1605.110709] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x1000000, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000000000100000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xbf]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x80000001, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffffffffffceb, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendto$inet6(r3, &(0x7f0000737000), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000300)="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", 0x154, 0x8004, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x200}, 0x22) sendto$inet(r0, &(0x7f0000000140)="6f83523df9f73be96127578e498a0693d8014dfe82d54d4d63a7f1940403650423b73d736c9fde43bdcb", 0x2a, 0x8000000000000c0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0xfffffffffffffd67) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000004c0)={r6, 0x3, 0x100000001, 0x6, 0x5, 0x9, 0x7, 0x7, {r7, @in6={{0xa, 0x4e21, 0x101, @local, 0x3ff}}, 0x6e6, 0x1, 0x1, 0x936d, 0x80}}, &(0x7f0000000580)=0xb0) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 19:11:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x11000000, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x1400, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x8800, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1605.543332] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1605.543332] [ 1605.607463] EXT4-fs (loop3): invalid inodes per group: 8192 [ 1605.607463] 19:11:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x300, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) read(r0, &(0x7f0000000180)=""/216, 0xd8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$unix(r1, &(0x7f00000000c0)="600feea5a23c7055389a499d8e6cc5a2e162882382e9de5b4c4e447b01daf92c76b02ad67255f0b5bc1217f36e71c4f66487343a5cd8864c3bb6a84d7985fd67765c3bbee2b60c3c1ce9cd8247a63c17a82a05a2a7037b37d7b834d6c81dfc098b3628f3dd380e7898b8962a5060d48d78ffe6fa1605117141f952b3a8463f75eedabfa2ce364faff7b4601a9cf6aad2961c0f27b2202dc5ec58d9b45bb3b4e80d5992b609", 0xa5, 0x11, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioprio_get$pid(0x2, r2) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:20 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000008200000000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020006c00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x600000000000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x100000000000000, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:20 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x40) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 1606.046372] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x600, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1606.104270] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x200000000000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000700010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x8800000000000000, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:20 executing program 5: r0 = socket$inet(0x2, 0x4, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0xfdffffff, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1606.475339] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1606.559853] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x5}, &(0x7f0000000140)=0x8) 19:11:21 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000004c010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x14000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xe00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffede, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:21 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) prlimit64(r0, 0xf, 0x0, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0xffffffffffffffff, 0x8004) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) [ 1607.088724] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1607.122414] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x20000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000020010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) [ 1607.290824] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xfeffffff00000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @local}}, 0x1ff, 0x1, 0x4, 0x6}, &(0x7f00000002c0)=0x98) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000300)="4e92a436ae72e6d4da86dfa2288355861004b51782241fdd8007e31ad3a0f9268d274a567424023051b82880270880c7f775b57fafaffe983f9e9b8dd52a07486256411bfd4d3f43899372ce680511a35fe3d21b9fdc6d45650d8a6a02f3a562a10babc9d051c0b61ca60a503d03d86f306b1c973c73f0d82cf4d5bea92a7834586875e70cf5666fcb857914baedd29e645c6958254d1d2516f539b554db890c72ab50e50bb6116ebbc30096cbc6c4c64de07a0e0cdde1770e952da8f3051dde9c6c99995f4738bbd25c99ee85d5a32247eda2af4804bc7506705e989e9574193fee8da3992ff2608f72bf7bfe5975c2d804dea2aa286af9914b90cd24e81137543cdc24b0e27a88be64712a7bd2442d8e2e45cd5a9fc85793eec33abd005c03ba13ba385426cf60ca8102161f5814403582ce88eb26e70b5bbf9d5ffc6470924390ecbd109c3689a3c23ff46f8cb3a761198f39f65854f16a629f7ea6dfc5f7db44a79193ba29a6857d5e0a756d2df034fa85179f728f70c6b56345ab7e36431b0214b8398f74e2ac178ed86e72c306f33e7d6ca4a5fb9dac5f42519105161300c9fc618166c8bf2453c78401377307a05175d80060c3c8d369c59419025de64556b1295c03a74e294a5579c5db0f41d8829f96d45861935e74c1960c6727e89830a12bd608947d745fecb4d66f50771cab74454e918e7aa343867903a8bd88ba9f6a7f6c790cfa84913a1ab32bcc49fa257d2754e17eae2ecfb1385504609ba4ed1676fc57a651bb1587463d9546f8ddb566a9b5c6da827d784a0bdcea7cb9053b374b1f4e9a227477c357ab475fd2ba0d8e1a4f8b010844c48657b5dd0a013a064f3dacdc2d2e784904c701fc65d6fc915b29b5b297aaae699831ab6e93ba187e51fa3ca2a2e129ee358a4d2b452db9d182c4673827b48147a5640375bb255c345a7abae4e884301e2dab56a2a975f6d2e49b3eefab2eccaebdca78a79a14124b1b452ac116e06edeba0298f2728d5162edee9d4ddbd442ff08ffa43d0f68a94e69ab8c3ac72c19d8887b83de068c440289c678f42dab72ad15408f607cc3236d907ffb60004a3ea3da5140c86f0a6934ad765d4df11b90b13a2e20d00a68b694bfdd6e8d9c510bc8be370df927a788469d5e7bb8ccacc21aae26dcb1af86e66a59ffd9a82769f53df3496551ac55bee4dee17489482c6d0544e740bd7eb30f96323ffcc913c06db5ee0129f90a983080d4aadc7433c11c3c83c2c85dff20eab6c9af508513622cb07fb88ac0afc83de6073c2023adfea0c64e32efbebe89bea58f93609ec1cb76c03c14f0b71d1c3eeb6e50d30ed552e6d09dd48a1c9a85b99e637855679630ab2ab83237a598ce0f9863bbb7b932dd96d2236580ce358e90651a277d112f88ecd1d87772674403a626bb0e5087d7748b5b2a198199f2065640640b2d41b351fe3932167802671c14984591e0bf28d4b40338f3549eaeb5601b5d0a79059b1a66e62bff092f11e2ea552a9335cf21fbc5cc5fca9f35e1c0d82a7174670f35410caece84952c28cc315ab0a7916822caad7cb7f7f122da66f428634a5b8184ccbda820f8120c0778d98dbd86207b7842901fee43068a94ae8647f6d00183c6efd7a483c0580e55ddd650607e752b0891da76bc5ba30679b4047432278bbb462275631df9794f9078964cc0de1f62a7058ffd17f1f1fbb957238e291b2d013c4e9beb989fd0f0f3961614c8192bed124499445c63a1ca60b04c6093a05d5a9a5bcbcc5d7190c6fbee5f1229825fa5c5b1cf9136dbec2d8da13801a176f2390c0893b90780bb2b0fe9d83adca2fad96f8000bb04aabe12177a682fdd6f53f7a097b26e06d0e5c72bff184e09fa5755dade196fe5d03d1997ba315401b6cefdfc3ad34d48e2a9a5c125c262f0ea6895baa7ee21ee5ee411f04b39c2daab0791b2616e87cef8c0612d439ba29ec1974c9d157df8d740c81c74bd0c986a2c14bdcc830b4f57fb3c2d321df524a67188ce2f880985ca5f7207943c472f5039269d95fdcecebf21ac4f5c3799e256a6b1d3e7b428ba4b5eb7f703a00fc88bbca8322215bb7dfe41ebfc93e9d8f738059061c3598a1fad60fcd011dd4ce0c4189e3e503ef418fce62351939d97549db3c40b593a211afe4d2f4f4fba94eea68a2121703c710ba52793094acc8ca7527585c88cf3d9308e919d55b0c8873cb3320a900a1babb8ee3c5056e12712cbeb952985d4366ad6d3869e1b55bc653375860c87ddc6aff2e65737811d3ee1ed62523ea6728895fd67c97c9cab1766276d1e2b1ce6b8e1213867614c2d04e37f53ba6b30656664a67b22966e168e5ff8ac17c6336703fba9f8e070daff5f13372ca0fb35b8914f6a19f6301eed0b4767980d81bd0f3c37d80a5f8b9ad4c696f8d6e1a24967427986c6b14387b6515ffc2db22835a0a55d48b25d6abe70dc2dcd4fac372175b334a9c105cb80ab1a30cec73a8856509afd0de0066f52aee72dad5e3a44a6cf2bb4b0749fed9c069812c97b296f0b2ecf9e3f14779cc0c7e50654cdc5ecc827ff3988fd97224c616d5ab6c27f77c21627df71cf5f8290ebc7dd5056de201cd4a35f081c9007b0062d88a66c49efc3e0a002c848644c9a0ab5cf8fb5d52cd238ac57e6cdd285c52255408363548c4aae05419d7e22f48b85845242c967f79b9ce774e5cbf67978c69634c1eea6b10bc818d56a7660e9c26e2edc68f3046ca0118172e17935fa089531b315edfa9df86f8bdf984dc39bf243b06d385100a23b65fe5d2536ef717be60e8871a3dd7254aad5ca477e861271cb51f3fdbdc5fec54a1d9d34887b7adf7c7d7598f9646903a481028ba5fd32fe9da03ed6405008b8df5a20c76c520e048ff6167de685d7d9a49efa73d120ef49d49f7b68702cfd56bf5689e99dcb6f9f61d6ae921176f80fdee27d38c9e893b635396593bc52e03a1ba0478cd2cc2f936d38a7a269f41c715ac9bc5cee40e29a4d9e82255a305449fe02ba001578b39b549fa37519d7f69c0ea9b8fd0d60dccf91affc92f9e81c183e8736d02f1b78a5530dc10675d3f801b6479f63211b4c5a9fd9621f56172b854233eea9f1157c3f7ed46152efff8b4a66c1735839b1b61846771f16672ca00f8105894661c95f470aa9d7da567d1c89f4461f968d973b9f80c98ddb2c0f0ed7bb0f7c456a14f529ff2a4aa01584f866c946c79515f9567a3e90b4a139f5992195f4ec1c82d61b200ae507d6e4c10e17f516332a27f8ede2ca25eeed5e88cf3f1c1d24c02515a8a59b339ca81a98629dfb1d9e3c470889e07c8fa3fe3e49976ec2128c3e3d95683ed066082dcd45a831d419ad2893411fde7a9be506dcad9bec9c0e7a30fbdcdce8335f67fd4fc93b83189c41ce78b2397b815bf4713a069f1d9c4832b6942fac3d3deb65bf1170ab33401df9062fb1ac646c315d17e496efcda5154fbcf328cc5388287fce6846db0c2644fb360d3eb086f44d6417271bd1c3f6bea7412bbe76d86d86fb826bf3764f15c3a207695654e5cb5ceca1424e19b870692ceb8c06100135b58b7b82dd1ad6ef917af2a654d66357db923da4812409e73b2741ca1001ecacf2a5a29bd6ed08ad758c39e01dc85fd0781d59d786fd7316523c6a199974d3f0539791cad1dd7a15e664a347378673f78e315a6d195eacbb995127b8c1e7065df1279d62a84d3cefc59e313c6f9406df0e3d487dd5fd888cf5e11a7ba146aed49119cc8cb4863f8b97824c51eb26b188aec8d72a4c1ffbd9a286de99e8529a522fed05e733157d001980fb9e28e5e277a27e2111f2abc6d387aacbd35f451a9c13d3c60b01074a9662713efcd5c31af10a4dd9ffbd90d90ee04511aec1da042698c37eee1eb7df6dafbbb5a2078d07886a19f46b870cb5d74c93d123e1fba8f28c6262743b50cf0010cc4e07d961b0db97d5e193ae635d09de3a6b0822935438b92d813c30cb8bcb5b9460f281284863cb080cce3ce66e0e36bbee024064d208a85274d7f30ff1b935e9c9015538f49d7e2ec3a0d9a99989912bceb73c60859d412f46de667f27f3822f67200f3c269612926092fbcae230dbe12008588f9eebe6e5210a8bedf29ebf1f0912688310d4c27e78555bf4a25cb057a761fa91c1e42457e3708ce91b1878dfcde623c8ce29f62e2c4e7fa1d8908c58bd910766b6497fcf4c66ba2480e081af3d0df23dc0b5821ab073a7eea35910936d1bd9bef77a59089ca23b40a8764faebec4e83d5b601a09fe848e3b53279f6550e44f45cbf3ed292a6516bb4cd2d052c283cf4568d94fa447f86408f6e550ccc076d32dead85a663e286fbb8aa1051548aab8a987a29cd1559d0df4c24a729cbf1e695a95cf5e4d7300458bfc31b03e24445625302ff54995c2f0ac7f5be52176d012576eaa29fab1a1bbaf982a0384d1238da0b861307ed4c8036f67631ac3f97721fbe8183bb52e3780047857bd14c23ed1b760160840bca807fe0345da2939a2873c74636c54494933d50989c1539fdfe86d8850157ec4fdce39a4b56a9f988fce2a26c0519390d59bbb919d2fbe942d260d45c586c84d216442b075c19c2ade53a11151cf4fa664fae6793bdb5ce559418a46a5423132e8c2361a4bfd2e48a616828f8b4e1ff031990c3c6da89b0478ca31bc6d720f3b1d10dd8fd37c9c2621c8e9e27cad16b048ffaf9f58568fc8963aed1ff5263365fbb849c96ae716c40a84bdcf20651abf7354ed617206283ec7ac71e200e853b9fb0cfb6348c58261063ffe17bd9257bed013bfad902733285031c332067f0a8d5f0518b977646f8cf4b6e2d8728eb2bb05938f3bc2f87bb67a9f6a5eb32148846b1eee12af13ab1702a3a4c008697c17b0b8f9b8392ea42b8fdb7cdaf3922ff522f2cc5f9bb4900adc406e0bca805b5d2a7cf62c26e4d1c0a7cbf4c03953b2258b9f7eec6c7f50c7ecbdc4f82caaa8d2d90f57e17094caae93626476d3cf47a501589c43299283bedfea036e6bfc26a1bed1de4f922aca156c6fe5ac85b97a6e6fd2729cc8c5662d0cdf807b3c3dbe76f54190bd1083b9a9195e889f65965d895736a308b0ebc4aaa154316779fdc3d6a03c61bf1919a6dbac47e01dea29649e4eaea81500d8560c8d0c7864d02a13b8d0b659cd339b8705314ca7d86761d95023d809a4fd5ce8aafc7d1c9b8d6cbd33fd1a8fbabe8cad19459e3e857543e34fc8f956d9ae5eb89920d43539bd019549caf61b20c3ed38ef6d27d4d3b552ff3f085c37549d5aa5743ee6492603ed44d1b0d28bf7631f86b3987cf9cf3b485423619ae45a47eadd49e1a2b40dfcee81eaa59017d6a981418e98a31edb016d6750dad7129dbc9ace6c35d0d7c8e2271990d8d76225047c3263a74c735384eac12370f87693ba31c25ae39696a5fd184a50092b630fcc8759945319254501048ae0da38f1057fadae98fdba70d96eb53cc2843db0dee40dd11dec2b9bd7aaaa30ab99d756acbd48614cf12ed66b6b091a95385aea16bd9cddcfd7bfc8e5d7df6630c9ae452c49d0c2a8cd1b2f24857d11224fd27861fb8c247ee5e99d11c2c1d2b9ec46e4f9a2d550b79e026d5eeb8f0357a4b65ac9dfd69d7f4691b7362111bb9056c55964e5464f3e2f6c3f91660d10cf52c709c87cd182f5a6011950a50e7ba4d6c98b025cd2ac7b6a7b556b5eee0359b7f0d5a652c2a158e84c01672e4472ec0894a3c6e9549943323c6426457e851708d3904ccc60c65d48b2aaca5b111c3b83a536fdda95870ea415583dd3df", 0x1000, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) 19:11:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x2000000000000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1607.362861] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000300010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x3, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:22 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:22 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x202000) ioctl$TCSBRK(r0, 0x5409, 0x829) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) ioprio_set$uid(0x3, 0x0, 0x3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="876034ca8b47af928dff6d4b808ad744", 0x10) 19:11:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1607.891665] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1607.980668] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x2, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xa00080, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/190) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x33, @broadcast, 0x4e20, 0x1, 'lblcr\x00', 0x30, 0x5, 0x7d}, 0x2c) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x1, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 19:11:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec00020400000000000000000000000000200000002000e909010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1608.175835] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 1608.192141] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1608.236725] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xbf00000000000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x6, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000009010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') recvmmsg(r0, &(0x7f0000002340)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, &(0x7f0000000340)=""/161, 0xa1, 0x8000}, 0x1}, {{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/93, 0x5d}], 0x4, &(0x7f0000000780)=""/156, 0x9c, 0x23}, 0x40}, {{&(0x7f0000000840)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/28, 0x1c}], 0x1, &(0x7f0000000940)=""/95, 0x5f, 0x4}, 0x9}, {{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/89, 0x59}], 0x1, &(0x7f0000000b00)=""/82, 0x52, 0x1}, 0x40}, {{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000c00)=""/20, 0x14}, {&(0x7f0000000c40)=""/126, 0x7e}, {&(0x7f0000000cc0)=""/254, 0xfe}, {&(0x7f0000000dc0)=""/123, 0x7b}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/50, 0x32}, {&(0x7f0000001e80)=""/151, 0x97}, {&(0x7f0000001f40)=""/248, 0xf8}], 0x8, &(0x7f00000020c0)=""/179, 0xb3, 0x9}, 0x9}, {{&(0x7f0000002180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002200)=""/66, 0x42}], 0x1, &(0x7f00000022c0)=""/102, 0x66, 0xfffffffffffffffe}, 0x6}], 0x6, 0x100, &(0x7f00000024c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002540)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002700)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000002800)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002840)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000002880)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003e80)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003ec0)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000003fc0)=0xe8) recvmmsg(r0, &(0x7f000000b200)=[{{&(0x7f0000004000)=@nl=@unspec, 0x80, &(0x7f0000005340)=[{&(0x7f0000004080)=""/209, 0xd1}, {&(0x7f0000004180)=""/173, 0xad}, {&(0x7f0000004240)=""/12, 0xc}, {&(0x7f0000004280)=""/9, 0x9}, {&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x6, &(0x7f00000053c0)=""/117, 0x75, 0x1}, 0xf5}, {{&(0x7f0000005440)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005540)=[{&(0x7f00000054c0)=""/67, 0x43}], 0x1, &(0x7f0000005580)=""/254, 0xfe, 0xfffffffffffffff8}, 0x20}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000005680)=""/41, 0x29}, {&(0x7f00000056c0)=""/225, 0xe1}, {&(0x7f00000057c0)=""/104, 0x68}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)}, {&(0x7f0000006880)=""/2, 0x2}], 0x6, &(0x7f0000006940)=""/37, 0x25, 0xffffffffffffffe1}, 0xd304}, {{&(0x7f0000006980)=@nl=@unspec, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000007a00)=""/164, 0xa4}, {&(0x7f0000007ac0)=""/163, 0xa3}, {&(0x7f0000007b80)=""/91, 0x5b}, {&(0x7f0000007c00)=""/204, 0xcc}, {&(0x7f0000007d00)=""/117, 0x75}, {&(0x7f0000007d80)}], 0x7, 0x0, 0x0, 0x7}, 0x7}, {{&(0x7f0000007e40)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000008040)=[{&(0x7f0000007ec0)=""/159, 0x9f}, {&(0x7f0000007f80)=""/172, 0xac}], 0x2, &(0x7f0000008080)=""/195, 0xc3, 0xa5}, 0x4}, {{0x0, 0x0, &(0x7f0000009500)=[{&(0x7f0000008180)=""/4096, 0x1000}, {&(0x7f0000009180)=""/232, 0xe8}, {&(0x7f0000009280)=""/112, 0x70}, {&(0x7f0000009300)=""/242, 0xf2}, {&(0x7f0000009400)=""/48, 0x30}, {&(0x7f0000009440)=""/176, 0xb0}], 0x6, &(0x7f0000009580)=""/255, 0xff, 0x10001}, 0x100}, {{&(0x7f0000009680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000009980)=[{&(0x7f0000009700)=""/165, 0xa5}, {&(0x7f00000097c0)=""/118, 0x76}, {&(0x7f0000009840)=""/50, 0x32}, {&(0x7f0000009880)=""/42, 0x2a}, {&(0x7f00000098c0)=""/117, 0x75}, {&(0x7f0000009940)=""/17, 0x11}], 0x6, &(0x7f0000009a00)=""/107, 0x6b, 0x6}, 0x5}, {{&(0x7f0000009a80)=@un=@abs, 0x80, &(0x7f0000009c80)=[{&(0x7f0000009b00)=""/108, 0x6c}, {&(0x7f0000009b80)=""/217, 0xd9}], 0x2, &(0x7f0000009cc0)=""/58, 0x3a, 0x3f}, 0x6}, {{&(0x7f0000009d00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000009f40)=[{&(0x7f0000009d80)}, {&(0x7f0000009dc0)=""/43, 0x2b}, {&(0x7f0000009e00)=""/143, 0x8f}, {&(0x7f0000009ec0)=""/97, 0x61}], 0x4, &(0x7f0000009f80)=""/82, 0x52, 0x2}, 0x4}, {{&(0x7f000000a000)=@ipx, 0x80, &(0x7f000000a1c0)=[{&(0x7f000000a080)=""/94, 0x5e}, {&(0x7f000000a100)=""/29, 0x1d}, {&(0x7f000000a140)=""/107, 0x6b}], 0x3, &(0x7f000000a200)=""/4096, 0x1000, 0x7fff}, 0x460}], 0xa, 0x120, &(0x7f000000b480)={0x0, 0x1c9c380}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000b4c0)={0x0, @remote, @broadcast}, &(0x7f000000b500)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000b540)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f000000b640)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f000000b740)={@mcast2, 0x0}, &(0x7f000000b780)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f000000b7c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000b800)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f000000b900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000b940)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000b9c0)={'bcsf0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f000000ba00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000ba40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000ba80)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f000000bb80)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f000000bc80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000bcc0)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000bd00)={{{@in6=@loopback, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f000000be00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f000000c580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f000000c540)={&(0x7f00000029c0)=ANY=[@ANYBLOB="e4060000", @ANYRES16=r2, @ANYBLOB="00032cbd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004002600000008000100", @ANYRES32=r4, @ANYBLOB="e401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004002000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600757b21ef2b2d5c61a0f39677471a2ef81201ef4a4ed838d771d63f7a549af9361bf5e666c2e1a65b9cac8f11614b86063193cdd0d6becc3d5bcef9182aef8245bd5c69210ff38ca317d7ee26dc034507e6cc34dbc472adb9736e209b76170cca4e4d1898ecec03dd14caef4aaf92d4b0f6465e50a546d09b6fad7eb1d726ae73b1f4872075206c68ff4ab1c9418f92043fa0400f13b7aa4f", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="8402020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000010000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="08000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000100010208000000070003cefeffffff01000101ff7f000003000104ff010000000009057f00000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400a60900003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="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", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x6e4}, 0x1, 0x0, 0x0, 0x90}, 0x800) mq_unlink(&(0x7f0000002580)='!securityppp1}trusted}\x00') sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 19:11:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1608.410720] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x1100000000000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1608.454153] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec0002040000000000000000000000000020000000200009e9010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x3000000, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:23 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x40a85323, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe0000004000"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1608.806557] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1608.865824] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0x7ff) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0xff, {0x2, 0x4e21, @loopback}, {0x2, 0x5, @rand_addr=0x800}, {0x2, 0x4e23, @remote}, 0x20, 0x4, 0x7, 0x5, 0xcb, &(0x7f0000000000)='bond0\x00', 0x2, 0x7, 0x80000001}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x5a, "a0ee9aafdce0bae3163e1e96c1201e932b4b6f624eb2da29014ee7148931d10b04583b63302cbedc4d2b9a7d72e8469b2e7211a9660a55cfeb1dfaf593ca25fdd09edf0953efabdf5e01fd8ebebafabd592747e854dceff91a7e"}, &(0x7f0000000380)=0x62) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r1, 0x3f}, 0x8) r2 = socket$inet(0x2, 0xe, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) tee(r0, r2, 0x4, 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x4, 0x30002) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000200)=0x1) sendto$inet(r2, &(0x7f0000000000), 0x0, 0xc0, &(0x7f0000000040)={0x2, 0x0, @multicast1, [0x0, 0x3e8]}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e20, 0x9}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @broadcast}], 0x5c) 19:11:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0x600, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 1609.116244] bpfilter: read fail -512 [ 1609.120338] [ 1609.122043] ============================= [ 1609.126730] WARNING: suspicious RCU usage [ 1609.131018] 4.19.0-rc2-next-20180903+ #54 Not tainted [ 1609.136299] ----------------------------- [ 1609.140553] kernel/pid.c:330 suspicious rcu_dereference_check() usage! [ 1609.147609] [ 1609.147609] other info that might help us debug this: [ 1609.147609] [ 1609.155869] [ 1609.155869] rcu_scheduler_active = 2, debug_locks = 1 [ 1609.162654] 1 lock held by syz-executor5/13578: [ 1609.167376] #0: 00000000ea986fb6 (bpfilter_lock){+.+.}, at: __bpfilter_process_sockopt+0x1c5/0x39b [ 1609.176814] [ 1609.176814] stack backtrace: [ 1609.181416] CPU: 1 PID: 13578 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180903+ #54 [ 1609.189922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1609.199267] Call Trace: [ 1609.201856] dump_stack+0x1c9/0x2b4 [ 1609.205492] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1609.210837] ? vprintk_func+0x81/0x117 [ 1609.214887] lockdep_rcu_suspicious+0x14a/0x153 [ 1609.219561] pid_task+0x1ce/0x200 [ 1609.223024] ? find_vpid+0xf0/0xf0 [ 1609.226555] ? radix_tree_lookup+0x21/0x30 [ 1609.230781] ? idr_find+0x44/0x50 [ 1609.234244] shutdown_umh.constprop.0+0x33/0x7c [ 1609.238923] __bpfilter_process_sockopt.cold.1+0x9b/0xa0 [ 1609.244377] ? ipv6_mc_check_mld+0xf70/0xf70 [ 1609.248784] ? lock_downgrade+0x8f0/0x8f0 [ 1609.252941] ? lock_release+0x9f0/0x9f0 [ 1609.256907] ? check_same_owner+0x340/0x340 [ 1609.261243] ? graph_lock+0x170/0x170 [ 1609.265085] ? ipv6_mc_check_mld+0xf70/0xf70 [ 1609.269514] bpfilter_mbox_request+0x4d/0xb0 [ 1609.273951] bpfilter_ip_get_sockopt+0x6b/0x90 [ 1609.278614] ip_getsockopt+0x247/0x2b0 [ 1609.282557] ? do_ip_getsockopt+0x2490/0x2490 [ 1609.287075] ? _raw_spin_unlock_irq+0x27/0x70 [ 1609.291559] ? _raw_spin_unlock_irq+0x27/0x70 [ 1609.296044] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1609.300710] sctp_getsockopt+0x47a/0x7c6a [ 1609.304862] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1609.309959] ? compat_start_thread+0x80/0x80 [ 1609.314389] ? sctp_getsockopt_peeloff_common.isra.24+0x2f0/0x2f0 [ 1609.320616] ? _raw_spin_unlock_irq+0x27/0x70 [ 1609.325097] ? finish_task_switch+0x1d3/0x870 [ 1609.329581] ? finish_task_switch+0x18a/0x870 [ 1609.334077] ? __switch_to_asm+0x34/0x70 [ 1609.338133] ? preempt_notifier_register+0x200/0x200 [ 1609.343252] ? __switch_to_asm+0x34/0x70 [ 1609.347305] ? __switch_to_asm+0x34/0x70 [ 1609.351364] ? __switch_to_asm+0x40/0x70 [ 1609.355413] ? __switch_to_asm+0x34/0x70 [ 1609.359468] ? __switch_to_asm+0x40/0x70 [ 1609.363532] ? __switch_to_asm+0x34/0x70 [ 1609.367595] ? __switch_to_asm+0x40/0x70 [ 1609.371725] ? __switch_to_asm+0x34/0x70 [ 1609.375797] ? __switch_to_asm+0x34/0x70 [ 1609.379882] ? __switch_to_asm+0x40/0x70 [ 1609.383944] ? __switch_to_asm+0x34/0x70 [ 1609.388016] ? __switch_to_asm+0x40/0x70 [ 1609.392094] ? __switch_to_asm+0x34/0x70 [ 1609.396158] ? __switch_to_asm+0x40/0x70 [ 1609.400210] ? __schedule+0x884/0x1df0 [ 1609.404130] ? __sched_text_start+0x8/0x8 [ 1609.408280] ? graph_lock+0x170/0x170 [ 1609.412082] ? plist_check_list+0xa0/0xa0 [ 1609.416224] ? __lock_acquire+0x7fc/0x5020 [ 1609.420485] ? check_same_owner+0x340/0x340 [ 1609.424804] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1609.429248] ? print_usage_bug+0xc0/0xc0 [ 1609.433321] ? rcu_note_context_switch+0x680/0x680 [ 1609.438245] ? lock_acquire+0x1e4/0x4f0 [ 1609.442242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1609.447775] ? futex_wait_queue_me+0x562/0x840 [ 1609.452365] ? refill_pi_state_cache.part.8+0x320/0x320 [ 1609.457773] ? __lock_acquire+0x7fc/0x5020 [ 1609.462032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1609.467572] ? get_futex_value_locked+0xcb/0xf0 [ 1609.472227] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1609.477241] ? futex_wait_setup+0x281/0x410 [ 1609.481573] ? mark_held_locks+0x160/0x160 [ 1609.485802] ? futex_wake+0x760/0x760 [ 1609.489613] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1609.494806] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 1609.499917] ? futex_wait+0x5d2/0xa20 [ 1609.503724] ? perf_trace_lock+0xde/0x920 [ 1609.507891] ? futex_wait_setup+0x410/0x410 [ 1609.512213] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1609.517418] ? zap_class+0x740/0x740 [ 1609.521135] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 1609.526241] ? futex_wake+0x304/0x760 [ 1609.530048] ? graph_lock+0x170/0x170 [ 1609.533859] ? find_held_lock+0x36/0x1c0 [ 1609.537914] ? lock_downgrade+0x8f0/0x8f0 [ 1609.542086] ? rcu_is_watching+0x8c/0x150 [ 1609.546238] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1609.550914] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1609.556684] ? aa_label_sk_perm+0x45b/0x8d0 [ 1609.561043] ? aa_profile_af_perm+0x430/0x430 [ 1609.565611] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1609.570553] ? aa_sk_perm+0x20c/0x8a0 [ 1609.574384] ? fget_raw+0x20/0x20 [ 1609.577993] ? __fd_install+0x2db/0x880 [ 1609.581976] ? aa_af_perm+0x5a0/0x5a0 [ 1609.585807] ? dlci_ioctl_set+0x40/0x40 [ 1609.589792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1609.595315] ? do_vfs_ioctl+0x201/0x1720 [ 1609.599395] ? alloc_file_pseudo+0x281/0x3f0 [ 1609.603867] sock_common_getsockopt+0x9a/0xe0 [ 1609.608519] ? sctp_getsockopt_peeloff_common.isra.24+0x2f0/0x2f0 [ 1609.614879] ? sock_common_getsockopt+0x9a/0xe0 [ 1609.619546] __sys_getsockopt+0x1ad/0x390 [ 1609.623704] ? kernel_setsockopt+0x1d0/0x1d0 [ 1609.628111] ? lockdep_hardirqs_on+0x421/0x5c0 [ 1609.632696] ? trace_hardirqs_on+0xbd/0x2c0 [ 1609.637019] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1609.642556] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1609.648004] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 1609.653116] __x64_sys_getsockopt+0xbe/0x150 [ 1609.657559] do_syscall_64+0x1b9/0x820 [ 1609.661665] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1609.667032] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1609.672009] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 1609.677048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1609.682115] ? recalc_sigpending_tsk+0x180/0x180 [ 1609.686879] ? kasan_check_write+0x14/0x20 [ 1609.691134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1609.695994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1609.701190] RIP: 0033:0x457099 [ 1609.704389] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1609.723299] RSP: 002b:00007fd2013adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1609.731015] RAX: ffffffffffffffda RBX: 00007fd2013ae6d4 RCX: 0000000000457099 [ 1609.738278] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000004 [ 1609.745533] RBP: 00000000009300a0 R08: 0000000020000180 R09: 0000000000000000 [ 1609.752801] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff [ 1609.760087] R13: 00000000004cc598 R14: 00000000004bd578 R15: 0000000000000000 invalid request 0 19:11:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xe00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020002d00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:11:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 19:11:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet_group_source_req(r2, 0xfffffffd, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr}}}, 0x108) 19:11:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc0bc5310, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0xbf000000]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 19:11:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0xf) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = semget(0x0, 0x1, 0x4) semtimedop(r1, &(0x7f0000000040)=[{0x4, 0x80, 0x1800}, {0x3, 0x7fffffff, 0x1000}, {0x3, 0x100000000, 0x1000}, {0x4, 0x100000000, 0x1800}, {0x6, 0x6, 0x1800}, {0x4, 0x81, 0x1800}], 0x6, &(0x7f00000000c0)={0x0, 0x989680}) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) 19:11:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000003c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 1610.657312] IPVS: stopping master sync thread 7642 ... [ 1610.678872] device bridge_slave_1 left promiscuous mode [ 1610.684834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.782879] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) [ 1610.850629] device bridge_slave_0 left promiscuous mode [ 1610.856404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.190521] team0 (unregistering): Port device team_slave_1 removed [ 1611.250608] team0 (unregistering): Port device team_slave_0 removed [ 1611.315452] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1611.381573] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1611.517758] bond0 (unregistering): Released all slaves [ 1611.541155] EXT4-fs (loop3): bad geometry: block count 4 exceeds size of device (2 blocks) 19:11:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000000000000000000002000000020000a00010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 2018/09/03 19:11:27 executor 4 failed 0 times: executor 4: failed: net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument cover enable write trace failed, mode=0 (errno 25) cover enable write trace failed, mode=0 (errno 25) cover enable write trace failed, mode=0 (errno 25) cover enable write trace failed, mode=0 (errno 25) cover enable write trace failed, mode=0 (errno 25) iptable filter/2: getsockopt(IPT_SO_GET_INFO) (errno 6) loop failed (errno 0)